Overview

overview

3

Static

static

3

af7e507452...18.pdf

windows7-x64

1

af7e507452...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 17:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    af7e50745255b32eab076c8572010538_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    af7e50745255b32eab076c8572010538

  • SHA1

    a2558cef5ca151e941bf3a771bc89abbfaae1169

  • SHA256

    45def1a3e5296da1e4ed3e462f3ce952925340a6a798610212ddfdc35d5b4e80

  • SHA512

    9597bb011051727794a5831c3ef26c2dd6597f9e50c79469203563ebc17034c4af54611967e2bb75b85007c074ed4e4f52c40a9464d26a09c9a3e43d134231b9

  • SSDEEP

    1536:tGqJi2l1EvLenJ3u38O4x1qiwQX+mAZbnhx6nLcbEBHXIS9fjD8XkoOZ2IeobSXD:tGqxSvLERu38O4Kq1crL8I4ZY8rQ0oue

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\af7e50745255b32eab076c8572010538_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5216d6d3e8b1c47cfaf4375d7269aece

    SHA1

    ec9e197f2c11a6cca1d27755b2e6ec6ad12b2166

    SHA256

    6baf50b690f76e70965dcb5f19ce0eaa88dd104c94f3fd97956fdfa0aaf309d3

    SHA512

    076f8369b5a18eb9e25dcbfc8446431e0e09e041ed3acf8cba2879e4afbb44dd873130108b8c7e5e07c3da11d6e3a7605ce170e77f87aeb138e15b01ada5450e

    Download Submit