Overview

overview

3

Static

static

3

1b006de255...18.pdf

windows7-x64

1

1b006de255...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01-07-2024 10:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1b006de255eaa6d6841ea91da6bb5a68_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    1b006de255eaa6d6841ea91da6bb5a68

  • SHA1

    5ed6b36412e1fe1855adc9b642adef9e198a49c2

  • SHA256

    bb65b20aedb1c3d5f4e3cb833525eaed83c45697ab160d3be9c70040fd5f9922

  • SHA512

    325e5f80b79e59072979ae7f1a8893f2229de61e4cb57fe75565c187ea9ee88edbef937a0412bb417a0969b75a9c1119a80f05e37c202e43c755e2c329ced4c8

  • SSDEEP

    1536:dKuk8nP5l7t4boHma+SXyHpWLZS1wugWV+ZV6++8S240I+EjrWspO24se:I8nPCra+OyHpWLZS1w5ZV6B8HIJ22w

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b006de255eaa6d6841ea91da6bb5a68_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8a15f70c6dd49e4d143ade52bf95449a

    SHA1

    753e8b559c4aeef12b76bd5b020e5ec3eee98069

    SHA256

    a64b124c9c2c893c90c3fa7f143468b8a64bcb61ceb9623fb38e21ecb5786191

    SHA512

    616dd82fab4dff04601da7ea5f915a621c7b72a9b335f8126e908b81cc123f6cedf3a788e7be924498acb5c77f0d3c2416dbaf3e7645cdde1cbbc6d4908f6c31

    Download Submit