Overview

overview

3

Static

static

3

406bb2ecd0...18.pdf

windows7-x64

1

406bb2ecd0...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 05:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    406bb2ecd03c3658e5f3960185526e9f_JaffaCakes118.pdf

  • Size

    130KB

  • MD5

    406bb2ecd03c3658e5f3960185526e9f

  • SHA1

    5cb3e8308b3c498b249e75c366ec64d268230ec9

  • SHA256

    bb6aa9f38bf5db978b56baa6175b39aa8398738c724f5ac08d1d21838e874599

  • SHA512

    407886b82c427a907ba308c2a837a960afc43510ba856b581846df611d08718813b211b06ab6f540ca8f313787e2f652063d1c92b0b4a53cfa1ae2f2fef1f021

  • SSDEEP

    3072:o92h8fmN6r94O4FR8hrq0dcDVadb1mNR3UY6PKV4h9XZ4:o92hUSO4Fuq0CDVadbok0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\406bb2ecd03c3658e5f3960185526e9f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    baaff7a8ebbc34e00a56c5d7a08c15c6

    SHA1

    d864d59d18ed4544e9c1e2563d904b918cdcd46a

    SHA256

    56e90d831d1a121a666ffff712f3a94cc654e7d1483b0f9fa6e264178b8dafd1

    SHA512

    d955c9a411f9f8d26d7466a78a9020a3890f0475e1e3e34a5e59bd6620f183c7f8f927bc585bca395a2d409b7f8a038a3465f294161d5b9d95ddda122e4fb8d2

    Download Submit