Overview

overview

3

Static

static

3

0bb94cc078...18.pdf

windows7-x64

1

0bb94cc078...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01-05-2024 11:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0bb94cc07889ba771a8daf00a16e44ab_JaffaCakes118.pdf

  • Size

    52KB

  • MD5

    0bb94cc07889ba771a8daf00a16e44ab

  • SHA1

    edea9bfb1b59243b3a66ed385c7e2c14fddd343c

  • SHA256

    cdd5cad79a5a91584f0e4dc8934b25bb7c8e3442fa91f35af8fb7decab9737ea

  • SHA512

    0c9f350da75e7f890f9b8e1349d63cc502877f663adadbd4c04bc23edbd97a5be3f50c4012a392444d8d26542fbc685b7ce31240f127be7e7dc18da6f9aba764

  • SSDEEP

    1536:kXFZmGWSetcOBc3SepiF4pDC1wFJYIwp1MhEUU8p8K7WAU2/dGMb:SysemTwp6pH42/8G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0bb94cc07889ba771a8daf00a16e44ab_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2248

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    724b61e70635fc26792be559cd82077e

    SHA1

    8c172b90180f1b775a7d555e0f555b2166dc7cab

    SHA256

    f773bb3b1b4998afe7dad846719528bd53fb008b22802a912716e874975ef6bd

    SHA512

    b883c0ad46d8ff63c49806d635415aa42e70cc3b592e38aefc22a8e27a77484cdd737169fb50bd34db55819a20e471e23e090bd2497307b6d7fb28fe6a5dba20

    Download Submit