Overview

overview

6

Static

static

6

5bd94b34ae...18.pdf

windows7-x64

1

5bd94b34ae...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    19-05-2024 22:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5bd94b34aee8704f4b27f23338904534_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    5bd94b34aee8704f4b27f23338904534

  • SHA1

    81f735f44b59a5322c1aa1593b7dc1be807380d2

  • SHA256

    f7ed2f3a9c745528a50fa0bc884c9d0b382ed6ea9a69a0c21095cba7726f084b

  • SHA512

    e4199539229ed902a6dbfeb9de31cddfabc62df2b9941fced77cac63335457da15935c377afd3b64d21927924154defee9f98a59d438ab5081a0ce910da48496

  • SSDEEP

    192:WJNbBOmYoweREu/ZfNzsIr7aI11l2jlu4gsvlNBqbO4gtxJgEcwBE:WfBeoJREilYS7ND4x9e1kJNcwBE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5bd94b34aee8704f4b27f23338904534_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    52533798463a2371cb050e76d8f43a71

    SHA1

    56404eff66efb6a8ad16266fddd9f8dd07f93aef

    SHA256

    7ecab6aa3e1aec47d9df53e6774e09b86f88a7a3197c6b81a7566e200fd25de7

    SHA512

    c298cc34d0034ecfc89ba44daf165f26659deea1727ee2c2de8c5a758337f9b90588698c2341a6bb923850de4d132878039e275b60018959c7a2ea51ed00c7fb

    Download Submit