Overview

overview

3

Static

static

3

172da6c1f5...18.pdf

windows7-x64

1

172da6c1f5...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 03:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    172da6c1f5aadadbe4473b7ec3acdf4f_JaffaCakes118.pdf

  • Size

    77KB

  • MD5

    172da6c1f5aadadbe4473b7ec3acdf4f

  • SHA1

    b864f1c007c2103e2b8ba9a71fb741231bb107b3

  • SHA256

    0cfba1ce7a8568cf13ca8671e738a0e2c7efd2a3827c5504a6a902e3862e2084

  • SHA512

    af848d7fd93ed9f6004174afb2bc7d74fc4b777029903ae4252b4f20d8109eb2f42cfe17549c8250462f6a238c89805cd84276e9e633da3415c2ee8720c3e59f

  • SSDEEP

    1536:F1MNotGhfSl8fojQrieOZ/Q6YdmGGgRoDPGc/F+iLWA/cXlCW1PWcpOmbiV0:nMetGUUAQGeMYldRoB+iAlCW1eml

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\172da6c1f5aadadbe4473b7ec3acdf4f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    cd68d4b50e6a5625ccae123a5b71a074

    SHA1

    ce229e2d32b6584c4553da7eeb8c3148cb6845dc

    SHA256

    982a9b17f43f1bf2d270a8b0082f16d5f2cf71993bc0d2e211d01e5fd3e1f33e

    SHA512

    eee615a3297b4515bf685e9ac92c1c8584f6f4bfc1987da81778e7a9a7a1850b7a69162bfb360c8ac5b956f065d39ef54022cacfd79c7d4a7a50a22954e950bc

    Download Submit