Overview

overview

6

Static

static

6

296e5eb710...18.pdf

windows7-x64

1

296e5eb710...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    06/07/2024, 22:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    296e5eb710ba0e4a6912d406ba1c7771_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    296e5eb710ba0e4a6912d406ba1c7771

  • SHA1

    eb6acb26ae4e67a0e67fea20d05da532ef67d2c7

  • SHA256

    3a5650e9c885ef05a214192093c46cc94f93094fd59189eb771a3cd8ba473ce5

  • SHA512

    3011df9cd52bbb7ff54a85ca23eeb5c304723d7339b91a3b7bde7f5ab40763d7878c9acfa10f0ff91f1b9f4942766eb8f25908c2f76582ad563cd885716d0b3a

  • SSDEEP

    192:9Pz4ULMxLIKXHsfyxp0VxMF83Kf0E+/dXNt0zEgO3ZGSVrP2NTdGtTW9sxIQkCb:9Pz4ULMxLIKXHsfCp0PO0Esdo5kpVyR6

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\296e5eb710ba0e4a6912d406ba1c7771_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0a6775a9243b03483d39d519edc94b2a

    SHA1

    cd4f143585823aaef0ec64932c29b36f90e24615

    SHA256

    f00ed68764219f36193f28e4cdea5bfa3ab68eccec6a4d13cda1c1d43b75ceda

    SHA512

    6e3ebb9e522485da9e14244def3d2b1fbaf7aed1b8367fb83ddf0ca3490cc3e3edf767d6579c21314bb64833773deb06a5134d17f47739beecbd6111f866ed83

    Download Submit

  • memory/2028-0-0x00000000033C0000-0x0000000003436000-memory.dmp

    Filesize

    472KB

    Download