Overview

overview

3

Static

static

3

a5837c50cf...18.pdf

windows7-x64

1

a5837c50cf...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a5837c50cf2c400ce24bcd2509f7ae22_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    a5837c50cf2c400ce24bcd2509f7ae22

  • SHA1

    15e70694431d5f542be597f4d93a8d78e046ea12

  • SHA256

    f4aab13d70af35edc0cbdefc2849e1b1bf481479f3c5d39e0557e79c863e4c77

  • SHA512

    71f6da46cd67232f3d55112caffb9a8542d9632f477ad72e559fb40178027c245fbadf4ce8c223c7285a1b5bf77ef20f2fb8c6ca679cce97cf926f9568f10ae8

  • SSDEEP

    768:zgGzpDs6AIRKalFxV2AtF/P1Gl8E8P8tJu9o1buKApIppg:MGFQ8GeTP8Hu9WHApIppg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a5837c50cf2c400ce24bcd2509f7ae22_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8e19b0eee2dbeda4ab7d77f6e5fb8aa4

    SHA1

    5f2c21880bf1da4bb9c91b69d5914925dd0fdb92

    SHA256

    91e4de78bc98119eeccebb35895136d0bdc72e9914bc6305d5bdb4cc93078ff7

    SHA512

    961ddef3edc23fa9629a7cbae60ae322c5ebd86ba1131630ea381d14cd15093d690ca811b9700b3f63c6b30bd1f34f5f13229f766559a9a4a42b87ab10d3a131

    Download Submit