Overview

overview

6

Static

static

6

5f6d90f42d...18.pdf

windows7-x64

1

5f6d90f42d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 13:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5f6d90f42d52a3dbbec7eafb42db9027_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    5f6d90f42d52a3dbbec7eafb42db9027

  • SHA1

    9914019cfe4992b8e4027d7384119a6ea2e60733

  • SHA256

    40072baba02263c88ee9423dce9a0a3d239a5e781691e0fb34b8f8320a49bdc0

  • SHA512

    fd42ec38e2f9ac948ba1930687e1b3dd709462ffa926e61f421b90e68f3e3e63dfa481f024501f491308591e5cd70d7e264a0fbee7e1f91ddc903b8f4a9759c7

  • SSDEEP

    96:DKByOx5RkrggNYwtszjWRmqaVvjOfit+yLiPCh6B+0G4dIcM2tQDIlQ+OX1VfNU/:usOxPNmqa8vCChulfM8SgQ+OXvNCV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f6d90f42d52a3dbbec7eafb42db9027_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b90876dab78149f48c9a773279a8785a

    SHA1

    b04815c9a189973350e36c5380797fae6c050f76

    SHA256

    c152a4b15f14f028678cf413e6a9a448c8ed0c555275e4457ffb8f6a2a350c78

    SHA512

    a8ddd3f80edec13bf192b775c4accb5ea7f13c619e8f4182af49b3b969b0869d1670597f2a632cbb612e388bf045a741d99737f17c1370cf0a981147d7020ffd

    Download Submit