Overview

overview

6

Static

static

6

61e56f0b0c...18.pdf

windows7-x64

1

61e56f0b0c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 23:39

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    61e56f0b0ccdf35c78ccb25da0146959_JaffaCakes118.pdf

  • Size

    15KB

  • MD5

    61e56f0b0ccdf35c78ccb25da0146959

  • SHA1

    639984884c3aed9cdad618d9a83e54014734f60d

  • SHA256

    8908e03cc994a587b2ba8cd65ca6596c0c4641be09fa3737f2e06988c263e0dd

  • SHA512

    9ce74daec5c764af4958c2a38eaeb1e81130b07d1c706faa7df19888a9f0995d69088f2801cf23c08064f9dcdab8735d4349d06bd8e7e7feeae8dc61886e657b

  • SSDEEP

    384:hP5uqkEZ4rCQ35HT4DsoggptJqEIMkAMgGoXayAPanxoOahIYk:fWHt2zfTfXayHbaa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61e56f0b0ccdf35c78ccb25da0146959_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          7872e66b2954d307935d8e7bca895d23

          SHA1

          9eb70319ee55545852d765d3a61bb562b9de24a0

          SHA256

          07036a76851e9d20f15722944a82df0ec9771a7f785af4951fc67f8f70c3ed6d

          SHA512

          d18d9ef2b9465454388e12cd9a0217931fa97c4364ed707f5858e4b6b5f9857a43a3c18235be3ef56856e6610233d409eb5cc8d5725d265708f808d84dff368a

          Download Submit

        • memory/2512-0-0x0000000000E30000-0x0000000000EA6000-memory.dmp

          Filesize

          472KB

          Download