Overview

overview

3

Static

static

3

5b885e5e14...18.pdf

windows7-x64

1

5b885e5e14...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    19/05/2024, 21:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5b885e5e145085dbf1436e1811d37c98_JaffaCakes118.pdf

  • Size

    29KB

  • MD5

    5b885e5e145085dbf1436e1811d37c98

  • SHA1

    4334b1bc57fa35718b43b873abd54edfe3020465

  • SHA256

    d441c12412994002f34ac219f2b981c3cfc4c7916fa574280e0e656c2a15b403

  • SHA512

    dcb8d89fb68aab67a464848b46d41e0f3420215c81ebbe14bb6bfc533170d433a01ef6b815be7610b5965dc4d8041f162dac3d400dfc335992073695f361e8ef

  • SSDEEP

    768:iqNT0xxODuHgMOFZS0+BAEOKINZ3sTJqJvIq+OXyb1mhcBE53XuMZmwgCLWarSz:i+0xoDrfS0+BAEOKINZ3sTJovIq+OXyT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b885e5e145085dbf1436e1811d37c98_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    7ba42e182da20c803aee4ead3546852d

    SHA1

    4321065252c7d689ba7bea51564121b306e0851d

    SHA256

    aa624416bdbaf9e0735adf4e798dc551f93323e5e626705e0464caacf017b727

    SHA512

    94ef4364e393a9c243a066587a109bc2e972e0d5ee6ff4b9851630f94f6abbf657ef9c8ce53985c25b19a5484d5208f7aaf1367350f71b2b50943581370c8f36

    Download Submit