Overview

overview

3

Static

static

3

0f36b262f8...18.pdf

windows7-x64

1

0f36b262f8...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25-06-2024 19:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0f36b262f89a5de270cf16056ab5ba2e_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    0f36b262f89a5de270cf16056ab5ba2e

  • SHA1

    6a5ba5d5ac5e609a92d31f5d67732a6216cd4e4a

  • SHA256

    0f0f7e1fb56639b3eaa0b8dcefbf91964f6ba5d3d9a413b04870744375450b09

  • SHA512

    74302fafb2afe731a8492f6987f60853a9061bcdb0dd4e885bf3dc1311d5893daa4c2059a4735d30379fb047a169fca794e29f00b31064f2936dba3eb8a8d787

  • SSDEEP

    768:CN1gRnnr5Ks6bWMvgoagZjGsrGc8cKIsek1yM2aO:CARnnr8lvgdgZjGGKj1B2aO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f36b262f89a5de270cf16056ab5ba2e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e2359e4358e5f649712eb0468b826d2c

    SHA1

    5e4f9017cc623f2f4114e5ec3b48d09653e7281b

    SHA256

    e2eb6391eadd9908b7b44fc4fa585f9282363475e07b3e7bce4ea9b7aabd0bd2

    SHA512

    7ab5ff3d65ef71f7d871c1810be503ce52ecab44854caf48a92a3ebee31f3388384afcb4ab3983f60dc8c70247c26aeb5b91d8ce6f591bb0382708c288dfdc79

    Download Submit