Overview

overview

3

Static

static

3

a572587126...18.pdf

windows7-x64

1

a572587126...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a5725871268c4dc302c36122a3ace2e0_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    a5725871268c4dc302c36122a3ace2e0

  • SHA1

    81a2641214eb2fa288e0762392f1bc68834fd588

  • SHA256

    7f4af37fdc847fa60c7d779446af92a199bb8b521e4faa93d4795f12d8696685

  • SHA512

    35eb6d715a013d49564287c7eac1055b655317f795ea30a0712ad1edc597bc747aced6451b00fe99a2d2b00554d10fd5fa7cbb9580f642d081efbd2e8d7feac1

  • SSDEEP

    768:tgGzpDwpekfvc1CRyWRYlOzv4bXIeU/1W1dD/H+KHibcaEJ1HWxtKlEHdj7U:OGFcpuIeUIdyLMJ9WTwEHdj7U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a5725871268c4dc302c36122a3ace2e0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    437e389ca4144025b9f323af0f370481

    SHA1

    b3366e4dcd31e1e43f1468ac1a86c769c3646830

    SHA256

    d73beebb91e158cdcd9afe2a0c9faec19df67d6df12f6a78b96276212dc21d53

    SHA512

    745eeac8c932312f941e410cd791f078f569f7b4694fd8b792d525b52093432003d8f89e6256b3829dd2c4b43821d9d59164a3c6eb76a115d27fe980ddaf0459

    Download Submit