Overview

overview

3

Static

static

3

49a924fccb...18.pdf

windows7-x64

1

49a924fccb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    94s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 11:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    49a924fccbb5aa85b9b7f7a167d6b5b4_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    49a924fccbb5aa85b9b7f7a167d6b5b4

  • SHA1

    8e12c56f7fc05f085462ec1f27b7876b2cabc85b

  • SHA256

    9d7e2c2bfec182097c74249b360b9fce37adb6e738e429d222e477b5f4a211f2

  • SHA512

    1364a67099cfbfb5f968220dbd77aeec12cfbe28e5c8be355a352357bcf343382491467de1b385d013ec213a598ccc34ea8fa634387cfef2c070b7e0a6ad44f8

  • SSDEEP

    1536:DLSyvJiPE7eVyaAJxx4sE6OuhycIC7F3/SBjAb98n426d8Qzt+yBIWGuBasZmC:PLJB7esfx4MOuhqO3KB0b9Zd8QXSWGgX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\49a924fccbb5aa85b9b7f7a167d6b5b4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2456

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    74b6124dc3c14c1abdda919e192034fa

    SHA1

    8d672ca279fbcfae02b878e0089cdd40c46b6fa2

    SHA256

    072a560d83beb3feec35cdabe097565b6602832fae902bb0d40863b5f69cd1f4

    SHA512

    817439119ae99f8e72a85392b670f6f3af2d6d2392fdaf7800d4551cf939f1ca6b1a53c2b41326d09aee86ef3cec76d4c3207bc039ebc43fcfabe50ebf551049

    Download Submit