Overview

overview

6

Static

static

6

61a40e5fdc...18.pdf

windows7-x64

1

61a40e5fdc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 22:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    61a40e5fdccdce0d8db200b58597a90a_JaffaCakes118.pdf

  • Size

    11KB

  • MD5

    61a40e5fdccdce0d8db200b58597a90a

  • SHA1

    78a8b44138d222c53d5050a2ee2097207a05329d

  • SHA256

    ceeab3a28548cb9b9d6fa6e8a125b8bd32dcaa242b436e34b4b47d5b545592fd

  • SHA512

    9df38a080f7c74ab8e9e4ca7ec0784f2f693a013dea5329c5579e097701127f3d45f08920d4305d0e38f117c9f4385d22d6655d8c61042dc567e73ad20fe3995

  • SSDEEP

    192:rPz4ULMxLIKXHw08F5E78/+4MbuhC77EahUn2k86ZXOIfW3EecvM+WulmOaGPd23:rPz4ULMxLIKXHw08Hqw+4MbuY77EG33f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61a40e5fdccdce0d8db200b58597a90a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2668

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          ca97d98416d39a62c48d963723582e16

          SHA1

          4ec4dd2edd21931bf7164ad4d7dcc3e6c086a403

          SHA256

          703dec968be525b7c13dd8eaaefc6cecdbbff94368ce8ff3379ef250c8235c35

          SHA512

          d46f38a4531dcf02f506d130db120e52040c2af9b5d78436175660138a9241dc2faad420dcfb4ae53d1f60b53a7354adf3c0457f668f4912d754d6102fa9edc1

          Download Submit

        • memory/2668-0-0x0000000004250000-0x00000000042C6000-memory.dmp

          Filesize

          472KB

          Download