Overview

overview

3

Static

static

3

2a4b1b9636...18.pdf

windows7-x64

1

2a4b1b9636...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    08-07-2024 00:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2a4b1b963693f4098e325295e6f60351_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    2a4b1b963693f4098e325295e6f60351

  • SHA1

    9116b24cb6225f0969dc0dc4fdb3f9d38268422d

  • SHA256

    f4ac621118fc4b0fb607225c360fd0899feaa92c5f7e607f6fb3a0aa70f953b5

  • SHA512

    fd2e8707fd19ad4d31041c6122ccb288bd0681595db60439ad7ef9137531bae6b3ab5e6b61f36b78d4b19706c41696cbeb534f786180de08bc4e7b29876533b9

  • SSDEEP

    1536:T2g6fxzs0agNLKr5RX9HSG68Ve/rBLVaWB41caeEBM65WspO29J6A:TGmg4RX9HyntceE+6Y2J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a4b1b963693f4098e325295e6f60351_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    606243912de9e30f170281cd9b5bf93f

    SHA1

    21626c76049b00cdba7b809c7aa4f89d092cee3f

    SHA256

    1d4dbaad0731b2a0abb017ea0ad571807183dd583db20e44d29ef933c345964e

    SHA512

    ea7fe588195caef084ef2497b445e3b854acece60bf9e13dafa2f80223662a4ec0cd01e9d6bab55d681e49c25a50f1ed527f1ad0e2469a0e41c363cf0d6319aa

    Download Submit