Overview

overview

3

Static

static

3

a70b3cd3c3...18.pdf

windows7-x64

1

a70b3cd3c3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a70b3cd3c34ec51c7391484de747d721_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a70b3cd3c34ec51c7391484de747d721

  • SHA1

    6e46884e2660751da37e3e7fe27829b31e4f7105

  • SHA256

    0edcf4433002fd387b754d73fb67e88ea0ad04b48302061c16a54dab157ff44f

  • SHA512

    96e7842bdc108b9d6a55ecc4afef0daa1e697bbd8da54e3c780f08ee3ba15bf8111972411c029d005d7bfd66a71524c32330b64a4814851531255b0201e9d56d

  • SSDEEP

    768:igGzpD+pUL2Myx2XJ9xQgKHVIuLFC+ZNy7fek3etIbTI6JrmZr4MT7+nd:/GFCpULCC+Kek3etSTIYmZrl7+nd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a70b3cd3c34ec51c7391484de747d721_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1e2f75f514f8daf25a90d0051b07ea6a

    SHA1

    197da56b88fcce29eebae7bec3e663fd14a2dfa8

    SHA256

    68ff9bbe34d06a038cb78cb225685d66335e14043776c71faa8277a5dd307c1e

    SHA512

    7c8b6989d6bd2a6d0fde993cb302d760e8da2bcec0ef9d2afd8b7476d51e15ed8a18ba4a7a1c30822dce3dbd39b492694be22d77d14ecd94e65624c462f5f140

    Download Submit