Overview

overview

6

Static

static

6

5e41c91544...18.pdf

windows7-x64

1

5e41c91544...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 09:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5e41c91544d84be51d0d687ec0449361_JaffaCakes118.pdf

  • Size

    15KB

  • MD5

    5e41c91544d84be51d0d687ec0449361

  • SHA1

    b55c2a6c26a56902268661f4e1647ab6541ad86c

  • SHA256

    02cdcd65753d9bea05e9927eda4164f8081d29616ae6a60752ebe30381fed844

  • SHA512

    ca07cd423bc5463fd3d4b77323437a1e6b94ceda8d89795aedadac7cf56163181355a1866fee4745e4b8ffd9222207d2d9a345f7b30dd04c3ea688d6f1a00aeb

  • SSDEEP

    384:5X5nzeSUJA7BQ++ke+RArErpgWJwAyxrLIOVt:H/qA5ArEgWJwVrE8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5e41c91544d84be51d0d687ec0449361_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    da173b049c177abd3133a8f21575bfbc

    SHA1

    10845d666c109ec37fb0474638f17781b2815d8a

    SHA256

    af06d1d573bdc694e06e92a43fb446d488ee0d59d0bac24e8e6fe2837e3a2e1c

    SHA512

    730f22699c75a3617071305bdbf588bd3dd12357ef3486923c434a839b7cd2e2915f2699a95510923dd139dfc8df3d990ccc01dc163060a09bd946d8b20d3730

    Download Submit