Overview

overview

3

Static

static

3

2fe4b113f5...18.pdf

windows7-x64

1

2fe4b113f5...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09-07-2024 09:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2fe4b113f5f3c613fe046966ddaefcbb_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    2fe4b113f5f3c613fe046966ddaefcbb

  • SHA1

    cb904c460811184a29eeac6622b99c971337a296

  • SHA256

    097384282725f668d938c385c683d62a4137ca9a321f55abb2cfd37fbacfbf7f

  • SHA512

    3157adb4224f40815a23038fe25f11d66bcfefbc8522a1449ec9b146fe2e44ff25cc8233090354044c796d61d2376c1a2b4286299051828c133667e9704a7846

  • SSDEEP

    768:dvveDsesYs0s8delzMxeQHUezrleTPEauryp36emYjO:duoF8slzMxl5eTcM6xYjO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2fe4b113f5f3c613fe046966ddaefcbb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6bd7d0381c91c56cd9d2ae53c6232deb

    SHA1

    394f1e7bfc0f0f8644e5107fbebc16fc786d1b05

    SHA256

    cdc6456843b5535f5d435d0de574cf8552f6fd36b39e901474073b259e41cf62

    SHA512

    91090f270653e47e7029fb6d7401e7b74f1c6a24291722372d36aeddc531c7eba0230e184ad38d12f2c347bc6217c9e652eba32ef79f0231663f1fe5ce53bb89

    Download Submit