Overview

overview

3

Static

static

3

503f0e252c...18.pdf

windows7-x64

1

503f0e252c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 15:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    503f0e252ca15026b0f93eb069b37667_JaffaCakes118.pdf

  • Size

    187KB

  • MD5

    503f0e252ca15026b0f93eb069b37667

  • SHA1

    196b56bd1dadf1b829bebbf7da0fd99b2cad908a

  • SHA256

    9f25eac7a46836fe11312868fb5863e13eec97dab05172ddb2540b124b9f7019

  • SHA512

    c39508a5f6ee1f344f68e1fc795b9a88c87a7d40a78e4e1e339d19d2a0390c615debf507dd4af7b8d054c7f621b25e5af414811a7d406095ab4bac0094f638a0

  • SSDEEP

    3072:U2irbxzGAFYDMxud7fKg3dXVmbOn5ul1o1ltldnfjLZ6KjnV0gytJI2qO1XtAqCT:U2MKlWQ7Sg3d4bO7V0g4Ra1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\503f0e252ca15026b0f93eb069b37667_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2304

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9eca9f08bd42521f5a856e5c826483de

    SHA1

    ba8c053906df73dbb1bb75413a01883650e3288a

    SHA256

    425cdd087242d6a8081899b677c673b3d6332b5216834f3edb8aeb206862ccc6

    SHA512

    3b680c0ad6038fc0f2f0592cfbc441f577c87e25fe44921ef3a3e617c157fcd68698d3d7f3657b42e7636b35425330e92706eb8a57ee7047fa36b975dc8553b1

    Download Submit