Overview

overview

3

Static

static

3

1c94f39726...18.pdf

windows7-x64

1

1c94f39726...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 21:36

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1c94f39726ea4bfb91606c834b1e107b_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    1c94f39726ea4bfb91606c834b1e107b

  • SHA1

    7e88da90dea1c238874f6b02c532f742778713ea

  • SHA256

    908d652901e710c58fa671ed9ec126d391c47cfc1c408b20998607760f811892

  • SHA512

    1e10395ae62b3e6386877797107874112ad13f1dec48659edb81a1928e5a18071faf943b2f5759f34e5a47ef57c93b003048a87f735a7c9a1eba6bccf3f91f04

  • SSDEEP

    1536:HgYVNddH7iUD66VCnJKj2pAfVDxViDh147v2Wc+9OJzhLmFwWQpOC9ELmDl2TI:R/uUhCnYQDn47WwizUFfC9tr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c94f39726ea4bfb91606c834b1e107b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    35ab371bed895c78990018377375ad9e

    SHA1

    25915975bf08174b9f49a4a0f2e1faae4d797e22

    SHA256

    315a6ddd167c32585ed7ff1f1a6e6cfc7a3c8c8a02c61d87567ad86173148eaa

    SHA512

    3b1bb206f7572750681d5a0a9b486aed59b9b621f2095a9b1ee421845124fa7976a15f008fb7ec7b4bd7755197b8f98615b29acfbaf43379942e6c0163044ff2

    Download Submit