Overview

overview

3

Static

static

3

40f9b2465c...18.pdf

windows7-x64

1

40f9b2465c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 08:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    40f9b2465c23729c031647f58aa332cb_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    40f9b2465c23729c031647f58aa332cb

  • SHA1

    9210072664aaaf6ba0405161c3d21af196464db2

  • SHA256

    627b5377e412710abae35b5a8b1ce33b0600db7c10d8ca7862fa1f2364a66b2c

  • SHA512

    dc8981026a9be8bc6de354859f2d89d735b0970f4526ad16b45d108ea990a52dfb5f1712ea88bfb124aa27d13f38e037074184a9388215046ae939e626510246

  • SSDEEP

    1536:lzmAXSwWYOhhMpJ79d9u1tsD92y9YhuMHOtG97XeUFLK8YYWkNpOPaWFJIIv9ERO:YAXFWYObMf79/uwPMuMH5TvLSPXJrERO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40f9b2465c23729c031647f58aa332cb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2064

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    08fc827d1e258a7a0ff9f5c763b57ca8

    SHA1

    2d1b733ea513d59b4d12b898b3330c0944c4cb55

    SHA256

    18d717c2b0138844f4f806f0ef9bcdb6b15850e0e92e912c51aee87302fcb74a

    SHA512

    625eac58c44e2bc2a60019452a5437524b09a3a9fbd924289b642499ba88d54cbabcda024f21f14034b6a9fef1ccdc30ee4e3ece2cfa51e67770f6fe631905d0

    Download Submit