Overview

overview

3

Static

static

3

10734143bd...18.pdf

windows7-x64

1

10734143bd...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 11:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    10734143bdf009af4c4a9cf249c2e5b6_JaffaCakes118.pdf

  • Size

    62KB

  • MD5

    10734143bdf009af4c4a9cf249c2e5b6

  • SHA1

    8038d8b2d35c64c0800377b24d8909116183ac7c

  • SHA256

    6d94f515a132c06953e2c55985d076740684f144c4f6d13ad1abd4581569d499

  • SHA512

    2cb36bd5b1852105ce03f5bbb6edf0317c8819ed8c710454dc2f6f18205ccd81d4647797f9f5207dff2f9d677316cf070b485fe844e1d5f4ddf96d61f692b635

  • SSDEEP

    1536:Anuz28elGqeOiG1saLp2ja3lONsuZfOQHv8fucFhIiKZc/e4KiYim79J1KogXFZ2:A87FqeO11saKa3lONJ7PCjHD26XVPYH9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10734143bdf009af4c4a9cf249c2e5b6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2bdbe65af3306077d14c99f725c3ab90

    SHA1

    011d6e684325b8f719820ea52c7bd63748b572ef

    SHA256

    e57ff62a0ad93ce8dc4d51adc30c7982be62cc4c005bbe7ab65018835da4dea4

    SHA512

    a5dbdd0816e316b15e5471e84cdf1648173aff45dd2ea8c0ca0a5e16bd5aabd6e3cca408efeb8a168c46fcf0e13acc42008583365809082b4c8e48caeeaf1a21

    Download Submit