Overview

overview

3

Static

static

3

2a0b765c3a...18.pdf

windows7-x64

1

2a0b765c3a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 12:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2a0b765c3a37f6e94f7aab3b167eff4e_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    2a0b765c3a37f6e94f7aab3b167eff4e

  • SHA1

    9f11742c172defcb32e2122af5e7e2eacf5f4318

  • SHA256

    0d1e36ea0af0f25422d1ca0b4075c4091c26a0d2e6cd01a944ca51882bf1f393

  • SHA512

    f8b482d1dd39189edafb78b57d2412bd7748a357f348d622d0456b4c6cf85a6297fb058517d3707375e57747e60a87e5f373d03c86413455f29504ccea694d1e

  • SSDEEP

    768:sGw8O9tIAGMAsfHkeyNg3wSr7KW2dUZNE5+XuMZmwgCLWarExB:s7NvLGMAoHkeyNg3X3L2eZ1XFZmGWSEf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a0b765c3a37f6e94f7aab3b167eff4e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1463eb31f61befc208d4b4d7fbed6aec

    SHA1

    115399d29a8fb585fcc1a20f701b55abc2470411

    SHA256

    34c52e93c7a8a257591bc153c14e7258aad3a6574c323b9c698e9232a85c43f4

    SHA512

    86858d1b9d2c74ef60b5aef6f1c173f64ba80f1dab124edebf53671b42400f8cca29f3d3eff75270d0809981f83e04dd2d21a35ca98d3e67b3ad29e73256371b

    Download Submit