Overview

overview

6

Static

static

6

2f0faf4439...18.pdf

windows7-x64

1

2f0faf4439...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 04:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    2f0faf443906fac1d4e6ab3f0d4680aa_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    2f0faf443906fac1d4e6ab3f0d4680aa

  • SHA1

    bf2540a0cecf456ce1c49dc907277aeb8a9ffff7

  • SHA256

    58b3664b50dbf9b4b4be4cb1c282a46edf3ec2adfdb3e7a159e87afc9ae469de

  • SHA512

    1c12e5cc7c158595c674bf396271a92cf5bb9e89d04d3bf6b6923c55c9a010022b35f62beee851dd357d720bfba1a908f696530e2ea2c587939118a776669e79

  • SSDEEP

    192:zP5uFm4kEl3DQrwyIFBL1cqpftM+OKYrDy8Obx8rFWXk8z7nptYdFKCYG:zP5uFm4kElzvye1coe+OKYrWnbx8rFpj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f0faf443906fac1d4e6ab3f0d4680aa_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1448

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          1ef11b28d3102af24cd57a14982c79aa

          SHA1

          a8fbf1f22e6530f055883be4fa8f8c9bc100714a

          SHA256

          768de248b0f2ab5250102ff2c426de765eec5076e081ff14db577904f4b42894

          SHA512

          163895d0f228eecab24e69e114e7a2f3cbf03e5b494aeb9441fb8ffdb95642e1d4fc3a35f1eac51f140e86796425408f8c7e941e5e6acbbcf391989fdd2550d4

          Download Submit

        • memory/1448-0-0x0000000003DD0000-0x0000000003E46000-memory.dmp

          Filesize

          472KB

          Download