Overview

overview

6

Static

static

6

1aa9adeab1...18.pdf

windows7-x64

1

1aa9adeab1...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 08:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1aa9adeab1d996bb154fce73be3666f7_JaffaCakes118.pdf

  • Size

    9KB

  • MD5

    1aa9adeab1d996bb154fce73be3666f7

  • SHA1

    5740123fb81c074ebd6a5dea19810f8b026e4fdf

  • SHA256

    72282c80ecedcada214da750074f603ae4f43a6d51e5bcdbe92859e5cbf4b181

  • SHA512

    5351a473642b26881b69bfa4d539451038b5697567bc6daa622401dfc56d68bb92682235f85a1645d11b8c82f8f72d1b716bdc9f94e02bf6342ef8ecc69fae30

  • SSDEEP

    192:jPz4ULMxLIKXHsfyxvdQeW8uoM9jwnLPfXovModWHlE72a71XjeA+f/F75mJjkC9:jPz4ULMxLIKXHsfCvdQDQM9jofXopWgb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1aa9adeab1d996bb154fce73be3666f7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e0eab49aaed52c349482799d546a3aa1

    SHA1

    9fb2865cfd5113be4a1b161ae991814b1abb0ad4

    SHA256

    d47d66c712ade1c743fa5685bd1cbe7481278157108dbf99652f18e7a9b5a535

    SHA512

    727544f1f94fc7465589ed32f44feec281e61418c3b24eef38a7a2e6fc2ca39a6a49426f24aa440fcc1e5069dbc32b54a6742e240eacc3474928c907855336aa

    Download Submit
  • memory/3008-0-0x0000000002D10000-0x0000000002D86000-memory.dmp
    Filesize

    472KB

    Download