Overview

overview

5

Static

static

5

26bb2a1717...18.pdf

windows7-x64

1

26bb2a1717...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/07/2024, 00:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    26bb2a1717034c1520c7b26476ae83a6_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    26bb2a1717034c1520c7b26476ae83a6

  • SHA1

    16ad7d34ecf34325631494471619f1a86d4c275a

  • SHA256

    3c640324534aecdece5fe96f8e6c6181997d537b0cb3560330ef1b3c3a9f1821

  • SHA512

    82af0d8220e03d7cf3d96a4c385a355258ebdb6ec310c513321cad0ba02c39bea272082ccc78f18248557865b7382ef476e2158bc0f8ace13f783711ea91808b

  • SSDEEP

    192:uUz4ULMxL1KtZys9+oOY0H1rbx+P3cCQrZSAkdbkE9VJepeBajpPXYFeNgaUs2sn:uUz4ULMxL1KtZyw+oO1rbxG9QrZSwIVy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26bb2a1717034c1520c7b26476ae83a6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          8c55cf50e9a9f732b4241e2c3ce7f0ec

          SHA1

          437ddbfa3e26e40102eb1d2e41610c7b8210dcbe

          SHA256

          4bf62c47d35777a137510dc423e08d038c0f8b9e0c27da62bc1d9725d860bf10

          SHA512

          d948ebafca4f1c87a0511847d2c9b0672b67c23777518c94b9032ad17823850c3898ab46bb3968f699bd96d363ae30a5fae3f8ed939bfa8a5129fe749ce95132

          Download Submit

        • memory/2928-0-0x0000000003120000-0x0000000003196000-memory.dmp

          Filesize

          472KB

          Download