Overview

overview

3

Static

static

3

9a0bc59975...18.pdf

windows7-x64

1

9a0bc59975...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    06/06/2024, 05:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    9a0bc599757a5fb598f1e764a8f73440_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    9a0bc599757a5fb598f1e764a8f73440

  • SHA1

    8208fdc89f260bd6fb19d6826dcd53fa98a560e8

  • SHA256

    75ba8f6a62454841787609e9013a3430357ef474ccc1a26a10d63aa5f7091f0d

  • SHA512

    c65872dbde251692bb7679ece06d88abbbf53b990d6d410d628608eec7d06549725f64f81df6e5b249c9cf24b0018560f1012407dc35aa5b9adab76d30923192

  • SSDEEP

    768:YgGzpDBnLkk1eWpJeWD7kTyQk8LgbqaRvlObQroISMmOaCmEbhIFC:1GF1uTyQ9aRvcbQrCMmOaQbhII

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a0bc599757a5fb598f1e764a8f73440_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2375452b224800744a24f02022520e40

    SHA1

    d8a9bee097dbb53a33d94f4ad373719a27362455

    SHA256

    4b828dc1b8b092ede6f3c1559e9764b9f7fee57402bc8da6ee48769c9a53b9c7

    SHA512

    014ea4236dd6039169556959e9d8f3bd24ca31330416bdff0d2d54d0a7ae298171893e3375dfcc3392b2f214ebb80a0b5d72ca5a99c95c0a19392c09ce7b8794

    Download Submit