Overview

overview

3

Static

static

3

2dd6634c6e...18.pdf

windows7-x64

1

2dd6634c6e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 06:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2dd6634c6e2181dd7d0267f19442fe25_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    2dd6634c6e2181dd7d0267f19442fe25

  • SHA1

    4c35794969d48de94afc8909895b86c3f14cbe5f

  • SHA256

    a3705e77fe1c2ca06cec071412c4888d3ee063febde90c1d384f2dc0f212cd5a

  • SHA512

    1bd01a71adcae739b55e2f5c5112d286e38eea77ab8ae5da2e753df6a26a68455466566b27b3055684de01ba19ee8b9d5f20abf755809a5b744ab7cb35992669

  • SSDEEP

    768:wXuMZmwgCLWaruE5HpxD+PBE4XRjTRIzhNZxoc/4ddbpDvv588i8gHwmLgHHUgZi:wXFZmGWSvjD+PBE4XRjTRIzhNZxoc/44

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2dd6634c6e2181dd7d0267f19442fe25_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    40e29289cf3ff0da4ddbdb10f28076f3

    SHA1

    3a5fc4be11bbd7df00dfd4dac003720acc32ab50

    SHA256

    38d7e62c17025d2dcbbc74fbd7e5b7cf73e21e1d198b3c2f1f17f212b9322705

    SHA512

    c4a7d04ad79223c2c9979ef7cfcb1923936dc7445b2ef5ab486455b1057dbd05c8337451882447cdcc9a7adbd655100b6469a5072d1b4c8a46228f1c3ec148f1

    Download Submit