Overview

overview

3

Static

static

3

61295a10d7...18.pdf

windows7-x64

1

61295a10d7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 22:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61295a10d786e164dba107a6e803142c_JaffaCakes118.pdf

  • Size

    21KB

  • MD5

    61295a10d786e164dba107a6e803142c

  • SHA1

    93969250abf6c9cd53635f43b0d2f85a2999dfed

  • SHA256

    8500fa2dc7a7c0a04b7ac1700c0361b841bd79e58729c19d9c5e98f25d4cc11d

  • SHA512

    36dd55f0424ad6a037b25e296958b27be32f8bc94337abfdc2758a85120eff6244b6889ce30086bf41f7bc02e4efc6ef2f5304be13feea2be83ceda9c03b47ad

  • SSDEEP

    384:VzdRvN2CImrz1Z4AK4fqFU4f3cAjM/j1eKoYhCoDubW7wKe3RKLeSYg0JoZ/Yg7O:Vz75Iaz1TK48U4EsM71PhCoCW7/gMSSa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61295a10d786e164dba107a6e803142c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1896

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1c9fb80ac2bddb03fc0b0b1a8c9d3956

    SHA1

    66a68cae173ef4e66e715c7866b8a22bd8ee1fb0

    SHA256

    bdfe757830103723f7df94fe90f317a09d49000b653536531fe1b240807e95f0

    SHA512

    2c29544e60ad035839075f6ffc493c1fa9e7081324803220d1a1b9c44830662b6d28bbbbacefacda5fc3b39bd2e2c02f108093ea96e461821dd73ca271d9bfdb

    Download Submit