Overview

overview

3

Static

static

3

a5a82eba47...18.pdf

windows7-x64

1

a5a82eba47...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 13:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a5a82eba4746787a079e78f67d48c249_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    a5a82eba4746787a079e78f67d48c249

  • SHA1

    ebd91dee5c71be2e0d4cc434f95165f57a170704

  • SHA256

    66aa199dacc03569f4e2b7271325069bcddf063f8acda643d1627f5093a1f289

  • SHA512

    b7dfc1afd1b3d78ae5cd489e645e5a589593bcc9e7ee3cebff4f88dbc86a0e209ab703106ab7dc22894be3a87e96743ee53ad2d180f6dbc131447087b9bb3850

  • SSDEEP

    768:1agGzpDbhuo9Q0LuNOsQyKTbY3JydJQrzUp247IdZRuCHFx0G4zUMteFRiPPs5u3:1HGFflvQrzUp2zPR9gGAUjosu4Obt7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a5a82eba4746787a079e78f67d48c249_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2172

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5cba7da68d92bed1be7662718d182047

    SHA1

    1b307813735a025a72df194ae5ca9dd533564527

    SHA256

    2888519fbe6c909ccb2396690dd7638e4d0befc3c8eaf7747d80d6c7e033e37a

    SHA512

    316738a93aa2981c155a4e8a10d4f438ed9b336212270eddbd9d43b05b600659742e0443e1929074279c7fdec61e9a6674c8763e98be3138a45c6f2666986b30

    Download Submit