Overview

overview

3

Static

static

3

7b1a912cf2...18.pdf

windows7-x64

1

7b1a912cf2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 00:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7b1a912cf2409f8aa7f8fc8709548f9e_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    7b1a912cf2409f8aa7f8fc8709548f9e

  • SHA1

    b0988e4140901d8123954d97102c0510d9bb3198

  • SHA256

    cf6f1e935db55b99ac35f8913344f605b2d26811cf9456f53a3c3353b7d8395a

  • SHA512

    8b5932c4c4926ab281cbd1fb012b14f893093b4cd6cd753709ba93dd6cbc0c459bf2cd76238d5e59d75cb861e82198a2d412511d30770d2e0ffecfcaf35ee651

  • SSDEEP

    768:HgGzpDr+Ng/0Dns9msaALDUy3BYG81oxqSkqArYgWlZID783jdjMfopinlTlzRQ0:AGF/DISkqu5AZfOfopCzRQVkNR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7b1a912cf2409f8aa7f8fc8709548f9e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    de6488d955debf3ce9617a4f3a44dda3

    SHA1

    28590ae1addebad1fb1354111ba437117466287b

    SHA256

    7da0012d6d5c10d68f0986ac407325619ac819f45320b3a076cc7cb0b591fa4f

    SHA512

    b039c3a5a23c4a6ab7b88d9a96507d7367edea8c80cdf5bffbc80641e416872b400f873cbedd0dd02ae05211df71496acb965aaee538fbfe8eb26a0bb2879e86

    Download Submit