Overview

overview

3

Static

static

3

38ca0b8ee7...18.pdf

windows7-x64

1

38ca0b8ee7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 06:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    38ca0b8ee783290feb8c68c224908321_JaffaCakes118.pdf

  • Size

    51KB

  • MD5

    38ca0b8ee783290feb8c68c224908321

  • SHA1

    3038226586a59703654aed43b6d7acda4fbcdc59

  • SHA256

    d6ed10cc6d1b4253c7f84e4c8521ec07385e67786ede2427dba8e4c494dcce46

  • SHA512

    b8306897dff6e2ab676dedab81a6cd85c7e5ebc622a4b5c69387cb3082595223c93297c1b4754a332f0b50f3bc7be53b54aa5408ca54899850022446dea849b2

  • SSDEEP

    768:cgGzpDyBVksi85yAg5mivhF10zoMvzLESh5MRXuXHOvG97hpSHBa1RwEiLDSbLto:5GFmkz5mivh3tadpSHEiLW/zDwbx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\38ca0b8ee783290feb8c68c224908321_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ff1d0b8eb5c30a7be80e491fad501b4c

    SHA1

    a2d5653d38c490c5285db114e86f29e65dd6c945

    SHA256

    9ee3c593b9dec7fe5415984764ace96c356601ab3ebf643b18ec4d71e6bc1cfe

    SHA512

    bcd2683301956c95eadaf3f6711ba6708dffce56f6299842f9a7e74fe34f9800109423a4d1288a5c426c05f7bc1e6533d0a2376568b4f90eb95bf2ed5985274d

    Download Submit