Overview

overview

3

Static

static

3

248155e9dd...18.pdf

windows7-x64

1

248155e9dd...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 10:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    248155e9dd051482131ec675225c9431_JaffaCakes118.pdf

  • Size

    66KB

  • MD5

    248155e9dd051482131ec675225c9431

  • SHA1

    cdf080a15f07c0a22ccaa60d10b12579b51ac416

  • SHA256

    41b3da0e50244c80daf369742310a3c4beba2376637ffcc3fca386db6ba3fd07

  • SHA512

    b568a7fa7f2b80241e834c42ab5f053dbc0e090d7d4a2997c375afb80d68bddb3b8d789e29d3d19251d98b3d3617a8ee92578b945fd9edca73c0970558b05771

  • SSDEEP

    1536:dGFPPFxKsUAKqJ7FYdl/fn8NoNuROf9xrzYClJs8UZpD+d:gFPPnUg7FYd5fn06zF5zXUvg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\248155e9dd051482131ec675225c9431_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6c151b20ecf9bce9d9721b3059f91f23

    SHA1

    333353368d024cf412123598c7de900c74cbdf87

    SHA256

    e57979f36327083062e34f8a57267f5d8bc6a0310800ce45faa04e4169c175d8

    SHA512

    0a205f463e852aa7988ea1671576d48d0c88bc32f570c46b4738f058ed162a561d1233c56c564d80b7b6b3a9fbeffadc3bbd41c8274036806b7658b68b2a0fac

    Download Submit