Overview

overview

3

Static

static

3

b1fed2c58a...18.pdf

windows7-x64

1

b1fed2c58a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 05:51

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    b1fed2c58a5fe53adc6ac9ba93059606_JaffaCakes118.pdf

  • Size

    183KB

  • MD5

    b1fed2c58a5fe53adc6ac9ba93059606

  • SHA1

    5fc024814e1add798b5396cff6fcd1bd2665513b

  • SHA256

    d3e93e428d15e24b6f5a80c44747341482b81918b1a2d8b578cbb4397a5a5453

  • SHA512

    9369b82a703fc03d0ebe885e8bc8124dbe73354a330b489257e9f865bf3e5cbff843c36a4a9fb91db49e07cf7407bee4ecb90a6029f1dfc71eaa93daf5cf61f5

  • SSDEEP

    3072:f2irbxzGAFYDMxud7fKg3dXVmbOn5ug6KjnqJf+SDQPPtwbLM8lDGSSP:f2MKlWQ7Sg3d4bOBqJf+O4P448tC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b1fed2c58a5fe53adc6ac9ba93059606_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a3e67c6aedba08c6a7c185abd41fae4b

    SHA1

    43e8b8e580473eeda838a988b321c29114aa9d53

    SHA256

    9bf235fc99e4ac1744e347c20b028fdf8b9c8d7ea0a418dc30bbea01561551a8

    SHA512

    3cbe4e16d62ae75f7de72dc03ff7bc9ff486684041b150e73d92fe656f1c9afdcc5666aebd05b21a5a56b6bfa7a4b228dcf81dd8b0d224e37b7ee5d77e3668ab

    Download Submit