Overview

overview

3

Static

static

3

a58582c703...18.pdf

windows7-x64

1

a58582c703...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 12:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a58582c703e7bff68ab3e98fd7321070_JaffaCakes118.pdf

  • Size

    103KB

  • MD5

    a58582c703e7bff68ab3e98fd7321070

  • SHA1

    aa9a97a4ced09fadb54e83909e618a924a158a7a

  • SHA256

    2bbc50a2d0fbbf76f45e657f1923b7e07a129745f9c10679043e9ad4bf9b0afc

  • SHA512

    adbbcae3bea5c2bc9c106494146733ce01d3dd9c9cb031e7ea46ff9af0e5e2171ed5c5dd9189765364d2e0ac1159e64994a8e883c62bd0ebf0fcebcfe282728c

  • SSDEEP

    3072:eucNwOxAjCSzhMxBapiS+EgpECIt1Crm5zr1Ag37nf99k4SG/DIzq2yi5ysfP:KwOxAjCSzhMxBapiS+TpEtAClr1AQns3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a58582c703e7bff68ab3e98fd7321070_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    386049415f0052f98e9e287e98e54476

    SHA1

    791dbc1da61e79f146ac4e129b28c388dc114640

    SHA256

    12b5508d8eee95e1e1ef4782f2200b6907568ec08c75bd3a5cc384e53083d515

    SHA512

    c8267034194494763e871f4b5b3f932c43fca63eb9d7cfc401fbced78e674b3554b94ac3b4ccefd0a874dc7d37eb66d08fe25622c1b9626ae4ecd9fac0a7a411

    Download Submit