Overview

overview

3

Static

static

3

42613db82d...18.pdf

windows7-x64

1

42613db82d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14-05-2024 17:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    42613db82d7935aaad8f2a60d758c24d_JaffaCakes118.pdf

  • Size

    186KB

  • MD5

    42613db82d7935aaad8f2a60d758c24d

  • SHA1

    8472c125086c671e56e019b6783ed0b04dd7f813

  • SHA256

    4b9ef662bf99293dac011b241a2e14c2e8c65805f5a61e22d0d1f6f54f0dbf30

  • SHA512

    09baca847246d1733b13f15ffd69d435c7200c60b830ff51358cc381da9a44263b03e423313165c02aa4db42fa854e014096ef8b7a273e19de12cdefd7590863

  • SSDEEP

    3072:c2irbxzGAFYDMxud7fKg3dXVmbOn5uC6KjngP9Aww958MX7r7LWlg8htdAL3l8SV:c2MKlWQ7Sg3d4bOv1w8mI/XWlqD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\42613db82d7935aaad8f2a60d758c24d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8ca78744fcb1df65b60d0fb1070d884a

    SHA1

    a9193061fc9502d567f541644b1d4c803524afc5

    SHA256

    b6cb2b329613df7fae284f3d64d09e266332f22ae684357422692b1f7c6db1cc

    SHA512

    b63daf50b4856095a179305a97027d96b1e236889fcc321b494673e561dc8433855356e54b1e31ffe77a546ac566f1263bb3edc43ec9540689a976e5035eaf57

    Download Submit