Overview

overview

3

Static

static

3

a57176efd2...18.pdf

windows7-x64

1

a57176efd2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a57176efd2d188cacfd31a79771040b6_JaffaCakes118.pdf

  • Size

    29KB

  • MD5

    a57176efd2d188cacfd31a79771040b6

  • SHA1

    35ea3d1bf3fc2831efbe88031924d9380f5b424d

  • SHA256

    572691c0a37567311447042fb48f1302c3cf6246d37d80cfbf9ca7590ef02c29

  • SHA512

    d06a52e2dfef64ae77721e9804bb8e95efdb3778ea4846a0fb0fb20c1c34888bc36e83a3481388b5dc31d0b91e5bbe1f96cecb785ccd2be1cf02c983378dc9a5

  • SSDEEP

    768:VzCzjhknzmhGjjva1kjiYd+UphHtzfrw9qy2jls/jzrvh3yFsOT9Eszz32Q8kW:laDwvC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a57176efd2d188cacfd31a79771040b6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c92309d544de820dafa294dad39de971

    SHA1

    f541558b885aa411a174cc02460de91b34694b7e

    SHA256

    1c6ce8c9d1cce9a478bfcd2d501bc05cfab63252ba47cac4f3c16feeebfbcff1

    SHA512

    36ec3ef7cd79d230245cd87c2a06977c2ffe192d812df685a4eaf0b1dc7c689b9f7508daeda952782df74b7f385de7b5dac8bfe43333f01878112252ee115bd5

    Download Submit