Overview

overview

3

Static

static

3

aa04395678...18.pdf

windows7-x64

1

aa04395678...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 13:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    aa04395678102c00ef409896b90e65b8_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    aa04395678102c00ef409896b90e65b8

  • SHA1

    1a61f0849c96671c439b8612393666f52fcf1af7

  • SHA256

    281245a213f36bf9d11f73913e8bdd9ab1f557df95a4dab7308165cafc2df136

  • SHA512

    c93c4b613a55775eabb809e4778c3ad7f3bfb5a433d181c69af2f7e00b5237ea9d51c79e05e0791591f3157a8a5eecac4ca5d0e5e0f89f775335fb07993cae05

  • SSDEEP

    768:uXuMZmwgCLWarnqLl4sqSdMAvWbetDfnoAd2tNepSSnwTv+TYe:uXFZmGWSnqLlPqSdTWbetLnoAUvesS2C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa04395678102c00ef409896b90e65b8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    aab1a584f27ecbf846f76fba9d2180b6

    SHA1

    90c662922f2d68c16915d2ff019d2f70a1853c32

    SHA256

    46602ab731bd4c663444adf30d8c3b29c26fbb57f791c39a525fa3adb4ad1c14

    SHA512

    e7c26482444e43d67992d7f35ca2773ff5d355dbbb835b314e1669c3d9dbeddb7e9132d1364e3fad48500ac527a095d28d4e66aa6944a016d78aadca74b7ecc9

    Download Submit