Overview

overview

6

Static

static

6

3873bf746a...18.pdf

windows7-x64

1

3873bf746a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11-07-2024 08:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3873bf746aca834e709897343778de9c_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    3873bf746aca834e709897343778de9c

  • SHA1

    55b19702dff3cf8e45481f1920c3f56fe1ef897b

  • SHA256

    558efecf999fb8fba6423f63d3de6adb90d0ecc2f0b13519b0add5a6e2937133

  • SHA512

    2a3ca6ba3ae55c072a293d69667daee6ba8a6db493e15d189577afe319eada43988945615b2eeb0b4a7cf4c84fd78af194bfe0ff9ab68bd75b68bcb667fb5fbe

  • SSDEEP

    192:6Pz4ULMxLIKXHszsdcRqcG0Uz9eeo2RNh8ZMvmGAV4VGwmSZWBPKGEkCKO:6Pz4ULMxLIKXHsAdFcGHz825HmSZ+PKv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3873bf746aca834e709897343778de9c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2844

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0858437857345ae72bd63445986abccd

    SHA1

    d8211d831fd690260ce47c94b640187861a57935

    SHA256

    ea70a167eac2df849836a6e039420885138f9f145ca86716962de6f3cf0da04c

    SHA512

    ae60d1e7a410f7d4bebb2b6e91ec3fdf096cce088b566e9bee04cb7802d093dad218f99282a3b778e42e780325de353b9dc66053b1e807cd36a27cf1b1316362

    Download Submit

  • memory/2844-0-0x00000000039A0000-0x0000000003A16000-memory.dmp

    Filesize

    472KB

    Download