Overview

overview

6

Static

static

6

40b9785377...18.pdf

windows7-x64

1

40b9785377...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    94s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 07:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    40b9785377fd18f7361e28f095707238_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    40b9785377fd18f7361e28f095707238

  • SHA1

    6b6b98926ddc6c24956cbad874d9ab9d922ef848

  • SHA256

    564d6218cf492552a6ea63cff5518d87a36367ae2561f31ecf226d3908bf6e71

  • SHA512

    1793ed340b0898b46cf695468b6441d3d4226b91b6438e7d85820d885a6e87731834e6a6263d3e898e83f82d5af7905d79f1e06882ba0d6c7f14a682c933cf3b

  • SSDEEP

    192:KPz4ULMxLIKXHszsTDeGbCw3wJrtjoFhWv76CaDr53ye9CozFuw+pYxkSLoG6jyz:KPz4ULMxLIKXHsATq1J1MhWjqrpF1zFT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40b9785377fd18f7361e28f095707238_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2800

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          e14b635e205f0fa0b02fc2bf2817ada4

          SHA1

          c6dce6f013f85014adfa4670040dd08e64ce7559

          SHA256

          0f03d228601241fb8f06d348f458f5a46ce83c9bf6dba4f17583608d181426e0

          SHA512

          c73a32adbc760fed0fe3c195d0fa260e7be98afb0ac9697059d7e974698fdba5084c5b243c661cbe1a31437f5a37493545b4a3fcab549154c320a05b15903b8c

          Download Submit

        • memory/2800-0-0x0000000003650000-0x00000000036C6000-memory.dmp

          Filesize

          472KB

          Download