Overview

overview

3

Static

static

3

0042065311...18.pdf

windows7-x64

1

0042065311...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 07:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0042065311bd9166c57946b8ded1ba0c_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    0042065311bd9166c57946b8ded1ba0c

  • SHA1

    64c52a4fd249746691793db4769649ca76ccf4cd

  • SHA256

    bf3a5b8dffd62fef84d84e1c978b6eedce05b9a0d5017450a2dc92ab60a1dc4f

  • SHA512

    9121347a1b2ac94ac5cd855d15e90a348625798b780d0c31b47649b520b7989848ca0a8cd37156f44a090071290934eb33f4d514f33d2676a2642619d8aa7861

  • SSDEEP

    768:qHLPv3xPqBcKKLa2u1KaVTVWiQ1EPHVtGdNIxnL6Ic9R/pjj1BwlonE5dXuMZmwy:qDvpnLa2u1KsTVWiQ1EPHVtGjIxnwz/9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0042065311bd9166c57946b8ded1ba0c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0b634e5f0fbd50d5cb42a7b1093ca995

    SHA1

    b8bd227b723ae6b40d810109ee85f71a03f84ce3

    SHA256

    8f8f208d55caeddb2a1dbc5f49635c68b67ff3de4e775d5c88c4d67a930ec712

    SHA512

    4b2ea4be3112ab2aa750c3f5d242a1c168d24efd526ca405a88fea4cb354e987367c587fe6e7e9225e416174d8e3bcc5795656e0006101f28c781f0f7f03f7da

    Download Submit