Overview

overview

3

Static

static

3

75af920b54...18.pdf

windows7-x64

1

75af920b54...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 13:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    75af920b544b2f76ad773bc700da84ce_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    75af920b544b2f76ad773bc700da84ce

  • SHA1

    c272379eba65d7c60b0b80201dd4f430193721a2

  • SHA256

    994466cf647a34be843016ec473d8de5ecdc75dfbcfa99a0cb7c1fef7c8043ba

  • SHA512

    e69b02e8f2e029a31c1bd3f179831bb12f9d1986ef3e9d9887d0ec8ee531992deeb961b8875f35459f01669fde0f660ecb84beca31ff69e5e808d90c15213d1d

  • SSDEEP

    768:YgGzpDhp0Q88xrBm7ZMOZ4EJQDOELZzJ/3LlsdkK4YJ5GQrcvjpZqbG:1GFNp0QXxrBm7aBJ/bl8kK4Y3GQovjpR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75af920b544b2f76ad773bc700da84ce_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    65864a1979b2553f9f528c98fa5e0d85

    SHA1

    3f6cd91f85c4697a697389158add2675f4633d79

    SHA256

    cc86ee5104709f039ffa55dcb8942afc8d1828b0c9a9b4d668d421f11339c205

    SHA512

    d54f985b5e6995b03787641fe1688d4232afb768907c9019c2128baf08781ead8f32671df41f2b8e0ca11f7a09eb900a7bd2e25991eda4d00cca8a3b0baffa57

    Download Submit