Overview

overview

3

Static

static

3

a71d387b75...18.pdf

windows7-x64

1

a71d387b75...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 23:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a71d387b75580adc96c5db2452ffd121_JaffaCakes118.pdf

  • Size

    61KB

  • MD5

    a71d387b75580adc96c5db2452ffd121

  • SHA1

    b203d9f72ddbf26c7d7798889ad8bccdd2c54f72

  • SHA256

    70113d9a105ce2302b3407f4176e67866a463e4fb7cce41d22ad93b773958f68

  • SHA512

    8c5047a99ab2982de195f5cb5bb3771fb1e6b10d0e1dd147c0b7c4327e298166661acee550bfdd5cc02896467040d6283e8dd775df42dc9e0b1bb90ccea27c39

  • SSDEEP

    1536:hGFspzsP1gcMU4YG5Wb+fJBDNQFtCVciZag10FjEk9Z:EFspM2cHdG5/JBN8CgO0FwS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a71d387b75580adc96c5db2452ffd121_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    894b1e8a51516118965a4bb68da73374

    SHA1

    e20241158d580ceca77593ac4f81945869bf89ce

    SHA256

    7c6f3c9ea05e9eb270f81271613f2c5ab575ac2276cba1cb57394a06b31f9dbb

    SHA512

    e00a232bc199278d52dc5c7fc0088cb3d6185ec5d0c38e2383e805a408f598108a063c0c61e813986faae6c0323caf71f50813808f6efb5b196534ec40f23a36

    Download Submit