Overview

overview

3

Static

static

3

00eb45cf1a...18.pdf

windows7-x64

1

00eb45cf1a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 13:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    00eb45cf1abbcb1c9a53e7ad291f2600_JaffaCakes118.pdf

  • Size

    186KB

  • MD5

    00eb45cf1abbcb1c9a53e7ad291f2600

  • SHA1

    56d5a710e88b23d1829e1165e130af8d221edac1

  • SHA256

    d521358320b412723c31cb199c2572f48ed75fa5f1a203955a4116ac4167ba69

  • SHA512

    b529d12380541951464e7422e384830a8cd75fe4e325a40e182d009d0684b347872008585f3d73a5aa32face2f4991ed42fdce3ffd24e4fa0973a7cccbd15b5c

  • SSDEEP

    3072:K2irbxzGAFYDMxud7fKg3dXVmbOn5ug6KjnHF4BgS13b0gK/pD2NSn:K2MKlWQ7Sg3d4bOJkj4hp/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00eb45cf1abbcb1c9a53e7ad291f2600_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5c9040b5325fcf00f3b0686d996d12cf

    SHA1

    2990636433f88840453594da09c5460191088269

    SHA256

    5e24887d3714398ae5e231b439d167a34db705f0f9d692f451c70e75bdc2306f

    SHA512

    9d20d09d15e0ddd82b28d5a27dbfbb3c7c1bfa55f7216a06d92cc1ad4d564967a057eb6dce52695179bbeb66bad56a515b70c31bf8b4164f42b85fa62a8003ad

    Download Submit