Overview

overview

3

Static

static

3

96dc24eee6...18.pdf

windows7-x64

1

96dc24eee6...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 01:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    96dc24eee6b514d8fdd2d36bf2f337ec_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    96dc24eee6b514d8fdd2d36bf2f337ec

  • SHA1

    1cd2be9250164cb6e5950e68b214eedf7157c518

  • SHA256

    291503395a70e5de17876ff3689ad88fa5848b27827ddbc74e8bce0426f0662d

  • SHA512

    8fb07c420c1fe592b6e432442166a3b210918499ddd81ce11461bf4c436692398dc6638e7149cedf9c33b387b08ee43ce1b9f6fdc4947fc126a81be2ce3c8f41

  • SSDEEP

    768:rXuMZmwgCLWargE5HpxDF32qPZ47+xnsuodGF+kn7LRj/6+njxkKbrDjCRXSi0NE:rXFZmGWSJjDF32qPZ47+xnsuodGHLRjI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96dc24eee6b514d8fdd2d36bf2f337ec_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8b0a51471b3af09d33efe7a33937852b

    SHA1

    f352744418d3f1a78638405e59d3169f8c05fc26

    SHA256

    256fe0ea3481e02b7968063f93118a5f2f60196f1abb9044f0acfa0a6f832fc8

    SHA512

    8231a60a531efbf1ed1a9826adbeca9c373933f94a2b66d65d459ac10fa3f91e631b8a442bf97e7472b6cb24e2dca86967168ee9da53321215bbdaba4c6bcee8

    Download Submit