Overview

overview

3

Static

static

3

895b1e128d...18.pdf

windows7-x64

1

895b1e128d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 04:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    895b1e128dc2496da0f8679e5fa61f0d_JaffaCakes118.pdf

  • Size

    52KB

  • MD5

    895b1e128dc2496da0f8679e5fa61f0d

  • SHA1

    7b64ac106749a384b34cc15ed567221481aaf5a6

  • SHA256

    7094466b6d1ca3c5ccbe9594b83b8b7ef2056da17ee2cbd2743ca047fa397b69

  • SHA512

    152af8be97724cf850c7e89458f3dc7cb91e29ae465a86d412d8745378afcfadacd4d22047d8399473dbc1a0b03cd667bba93b99d8a3ee8a6479811d984311b9

  • SSDEEP

    1536:jXFZmGWSQ+478XCvvEpTTuTs1pxlUHy4CdqVL:Dys1y3Ewwzey4S8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\895b1e128dc2496da0f8679e5fa61f0d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    695cc60704655a71dc2b0a3411575415

    SHA1

    7878fcc1f78e5411bd2a6455e02c98d9038cca54

    SHA256

    e54a9160032be973dadccd8586fddda66798409c86eeb1c3eac14693aa6e4b98

    SHA512

    7b04192f469800c8d821f3e133502329b62f351c5c7908b995eda35830c465352425caf26b5adb9cf4ffa46f15e42c04ea9c5e7f164c503888b8002cbff5430c

    Download Submit