Overview

overview

3

Static

static

3

002e49f9db...18.pdf

windows7-x64

1

002e49f9db...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 06:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    002e49f9dbda6593a196bfe76a15a335_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    002e49f9dbda6593a196bfe76a15a335

  • SHA1

    e8edebee5303825f98c2fc510d1fa2a2ff6a6512

  • SHA256

    f31d467797065b8fb46849ae83a1b7429a74051cc1d8ffb9b6c86be7ec2501fe

  • SHA512

    62f4e82d1581ebb900a229d8ceb821e501ecd92d769e78bb853ac3070350dcbbf2e837d1356f924413358a37e9ae851cc4a602b9200907078f18cdcf1e7d310e

  • SSDEEP

    768:BNljzlHGgIaVYVBij16PxVHGVm1ulDQsahTFp2JJSbD1l/bLxuZ3nLxSn6cfUUYL:BHjhH4sYVBij16PxVHGVm1ulDQsaFFpI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\002e49f9dbda6593a196bfe76a15a335_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a41856998a7849364b1d85fd438230b2

    SHA1

    9015cb851458f232fc70e6f5e2aa4e5dd518677c

    SHA256

    872bb339f0ae9c8717abe67bc704a1b3e101116c0e144636e2a1506d14a8975e

    SHA512

    621716ac1668e3853d8e0198a2bd989367e25b36e8d8babd4eb29e6d2a98def53503c4452b06c2324f93e81ee03966a9580f180aaf62f04b4c4cffb740dae394

    Download Submit