Overview

overview

6

Static

static

6

5b5e622778...18.pdf

windows7-x64

1

5b5e622778...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 09:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5b5e622778affdcf9ecf9c4852e47148_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    5b5e622778affdcf9ecf9c4852e47148

  • SHA1

    d663651641c8ce1205d339038d29bec1bb922079

  • SHA256

    7348250e2960d61e4851a9f912a78d5abad3407eac048e20ae7147d0e893d610

  • SHA512

    4462391ca5681ac2320165e37d03939816f19728d34e6433921a20a9ae3b928c7cfc6b0581ef3dd05c4c8e6e160838f0e9a0d923b3dbfea9b208a8bfb0fef493

  • SSDEEP

    192:RPz4ULMxLIKXHsfyxlTzY6EenbKh5zFIBkZ9BuSSNapDnDQaUPN0tGNts6kCr:RPz4ULMxLIKXHsfC/RbIFF5SNapkaSNf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b5e622778affdcf9ecf9c4852e47148_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2680

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d7a079add0f241744fb30fd0fc7e431a

    SHA1

    58f8ec8c2e1728fa6336f324b20e78999162cca3

    SHA256

    bb515c298e46c8e511d3469e024cd3350fefbfd2698ffaff8d785a8e06f3c0a1

    SHA512

    e41f157f0599ee06d7261ce89ff90c76603fa18c34c8a17fdd8c672d6c94468e3c980cbae48faec83bc3cb7b47bb63d8543417bbd75253f8e4429560b47b68ef

    Download Submit

  • memory/2680-0-0x00000000030C0000-0x0000000003136000-memory.dmp

    Filesize

    472KB

    Download