Overview

overview

5

Static

static

5

26c32042ba...18.pdf

windows7-x64

1

26c32042ba...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    05-07-2024 07:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    26c32042ba1032df74068a9222bb7b24_JaffaCakes118.pdf

  • Size

    8KB

  • MD5

    26c32042ba1032df74068a9222bb7b24

  • SHA1

    a627f092e803a46677cdce212068587a8ce11469

  • SHA256

    40229d743c7f0bb82d2c431e0eca1ba23ebfbe40ada7dead399a69be9168d3fe

  • SHA512

    38c88625a3a2fa04166a3f08abda7f5f68b02c6b273a55684644a86e89506a69c401199d9fcadc782024daf69f25c476ad3c21c86a0f469e2284e03288563ee1

  • SSDEEP

    192:CUz4ULMxL1KtZys9+oOcUpjgvhEx5vE3IMxY3rKnUoELATTc15GjteN4XMUsr3d:CUz4ULMxL1KtZyw+oO7tgvhtxY3ciEHi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26c32042ba1032df74068a9222bb7b24_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f7d0a7b9fd117fed07dae8de1ea8ff56

    SHA1

    29382be11b490975facc75012e5a597deb292c45

    SHA256

    c81d8e315f205e4eddabb6bb2bcb3867c4235624517579b42b343e8918e36d88

    SHA512

    e98421665a11b455f28f934ddc9113108e978e867fc46a95f9c24f2d0d0aa5aba34f202063657d699c1eb2ff04abc4bb94b4e04cff97d832f1639dc5eb74e9d3

    Download Submit
  • memory/2356-0-0x0000000003020000-0x0000000003096000-memory.dmp
    Filesize

    472KB

    Download