Overview

overview

6

Static

static

6

5a6d58c510...18.pdf

windows7-x64

1

5a6d58c510...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    19-05-2024 16:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5a6d58c510514f300e75f03712b49fa1_JaffaCakes118.pdf

  • Size

    11KB

  • MD5

    5a6d58c510514f300e75f03712b49fa1

  • SHA1

    4dc2af2b55b269c3a3d769a79d047bd39636f593

  • SHA256

    749b2b99f5861482686a68861ae452ec96df02e0baed1b8deff4863c18359e1d

  • SHA512

    3d698075061398e4b5b0ef3d002cde4ff3cd61fc78e08ebe8cfa5bdf28e82285c93f00a3290356f7b65aeeeef9697475a711085bcb4597634c3764a8c9c69eb9

  • SSDEEP

    96:4XswUk+ZLspEhod2U2dLA0t2Fa1baVPJzivO:4Xj+9spg6p0tsd9Z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a6d58c510514f300e75f03712b49fa1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4d3eb383c955944db3b78926c88124cf

    SHA1

    4e31bc33138fa2af247fb80964a1589fbfa2863d

    SHA256

    83e790fb551f3596beb876701496f7715d55243ff9514e98cc473b1422ec49aa

    SHA512

    4b70de1f5f08cd4646953a1e814b143a0e4f7b50a7e834fe38f421d92b1e76ec5dcbf4b10f4e6d47505cb7aa43311cc33133072c537f0125d5072d5883b61fb2

    Download Submit