Overview

overview

3

Static

static

3

05c675f633...18.pdf

windows7-x64

1

05c675f633...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 18:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    05c675f6335a938b24f2e0fc9bb443a8_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    05c675f6335a938b24f2e0fc9bb443a8

  • SHA1

    777158cf023d6d029656bee0a0852720658d3342

  • SHA256

    46fd23ce907ed732eea65ef4c99396b7061eec9094906240dbc814578cd93ec1

  • SHA512

    ab158b900711672ffb986d121fb2a5f7a9436bd89bb61e07cf05a737707a02a40e6b872adf434911e9a5ae3ae72d5437540d64f78b67c46b8d7eeb215a6f53c1

  • SSDEEP

    768:RXuMZmwgCLWar2hfrVVF5pP6xvSVqZuYpfeL1iM/OFil2BB0Rw9:RXFZmGWSm516gK5YL1vOFil2BB0Rw9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05c675f6335a938b24f2e0fc9bb443a8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2804

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3f41275c8c26f876f3066bf9b38e3e0f

    SHA1

    848cf0f903541c99718bf8314915632b74b79c83

    SHA256

    73ff404725a712d21671b5aac0c1b3283f36a85df3797e11543fef46a3733d60

    SHA512

    3b59d456d66ab0a90fd705f6a31bd9b7ea95fe1a786e1c9f6c820266bdcfed03ac06aeb7fbd3561f02c9fbcdfe4ba7f70ad9951cc0afd2ace423dfb558bf8e0f

    Download Submit