Overview

overview

6

Static

static

6

1b8d99808a...18.pdf

windows7-x64

1

1b8d99808a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 13:54

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    1b8d99808a5a77efee0a34dd19f8e459_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    1b8d99808a5a77efee0a34dd19f8e459

  • SHA1

    f6c7e1893f0b1d953c3a2dbc8511a175e76afbbe

  • SHA256

    f557d93599f58c26177afb71921a0bbd085f93500b228d152dfbbdc1bc6ba261

  • SHA512

    b3ed19393e7d676d1af2b2086275cfde06b4a0294ac703fed06733f8c397b5aabf9dc191d738dd3ed812be1ee2dd39a502769c10dde451c4c3f18f13931be25d

  • SSDEEP

    384:OPz4ULMxLIKXHsgBWnw4R+qhQfCYtoUeYUHeKc8veOmkCm:Ob/uZXORyfttovbeK9vB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b8d99808a5a77efee0a34dd19f8e459_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          8f71a7a7d5f9b112b27867118ecdbdd3

          SHA1

          cab43037f90f31e41918373af82260876f5f96d1

          SHA256

          9d6c123ee1a376297bf49bf200124d26a100b578db78756fe7ada007b636b9ce

          SHA512

          a7dc332876dc656a1672fb0a2073a6e3b4fdef9dc4c565d1bc54edce18c844a784046d036d694226c9eafbaeb37cb7d0b0e91df229c756e19737760bd1d237be

          Download Submit

        • memory/2868-0-0x0000000003210000-0x0000000003286000-memory.dmp

          Filesize

          472KB

          Download