Overview

overview

3

Static

static

3

33fc5b51a3...18.pdf

windows7-x64

1

33fc5b51a3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 09:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    33fc5b51a32be04b34fc21e610b65d98_JaffaCakes118.pdf

  • Size

    187KB

  • MD5

    33fc5b51a32be04b34fc21e610b65d98

  • SHA1

    93922a896d47017af2223eedb29915096bfafd71

  • SHA256

    5881395ae8b1b253e2d7132420ed7feb3a69c88dad28ef51e88c11ac90e1f3d0

  • SHA512

    07f40bd2135b2e4f6685e35c3e6d57601fa860833faf4a335b52185e4aec5b269a18414db7fa4bf4c03bef045f8e9087dcf287f39220f4d62025ed822a0490ae

  • SSDEEP

    3072:D2irbxzGAFYDMxud7fKg3dXVmbOn5uY6KjnHbPalAcAIrWmw5XynSH:D2MKlWQ7Sg3d4bOx7Psgl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33fc5b51a32be04b34fc21e610b65d98_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0ec66be41cdcb32459303704cf435979

    SHA1

    d54e17c290227a8e8128de63a65a542276090646

    SHA256

    bbacbc9758eb24360609127ec9e12101df8d42fadd32871759ea0ef9f493970c

    SHA512

    c7d73ec6662d37397741adc7c12406637525d6039160e8be35b4acde9ad483c8ee7ad6741cf249654190d246e0bfe0c58e323c67a9c4a4c1254ca0ada00916ee

    Download Submit