Overview

overview

5

Static

static

5

5ca53852ef...18.pdf

windows7-x64

1

5ca53852ef...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    19/07/2024, 16:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5ca53852ef72d0cc1d87f7fd24915059_JaffaCakes118.pdf

  • Size

    7KB

  • MD5

    5ca53852ef72d0cc1d87f7fd24915059

  • SHA1

    edad2660f1cdcab15fd1170367945a0da5738326

  • SHA256

    4ff3788190a9e84c50da834d0535a897ac94c2f1588694ceae4d04366c897d1f

  • SHA512

    e147b098e1ad1d2d29f464c178c1edd64c6fd444633a11c6ccac1d7a0732cc614b28b0505102e4e79e9b574360e1e649a13d2e3bde062c9f2971f063d368e20f

  • SSDEEP

    192:nUz4ULMxL1KtZys9+oO2ZTyK98/jPA5w/RSRtm8raNBGeNw1BU6/x6sG:nUz4ULMxL1KtZyw+oOqTvWjGwQRttWNX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5ca53852ef72d0cc1d87f7fd24915059_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9c034679811c8b521c3e0a9552e7f586

    SHA1

    1e06eed00cf6614b6a0e49a6e9e29f1efdae80b3

    SHA256

    d29e2ff1710fe5f5e3d2b88a6f152038e583c21ad6f385be134dc9a8f5316cd8

    SHA512

    3abdd6e06409f664255ba3810af100f9ba878616308e6e396cc8a0420f3f3bc69795444bc83113f71cc490c9d53dc49c67e49684d97ea80b415be7c6b8fffa51

    Download Submit

  • memory/2668-0-0x0000000002A10000-0x0000000002A86000-memory.dmp

    Filesize

    472KB

    Download