Overview

overview

3

Static

static

3

17f2bc4dcb...18.pdf

windows7-x64

1

17f2bc4dcb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 04:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    17f2bc4dcbcc67d741af705bd362f4b2_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    17f2bc4dcbcc67d741af705bd362f4b2

  • SHA1

    42f32ca3ce8cbf908e181f34ab9949a5edf3b8d1

  • SHA256

    208e7ee74d75edefe8894f6a75a2621f08946cfe916dd464e7e021b04dcb9d60

  • SHA512

    cbd63d2ac179930e633da5a66c30d785c2388fa7ba4b97c7a3c598352e933d404f68fa2f35c4636fb6b66acd30356c230ea5b583023c7837f014a525b82140e0

  • SSDEEP

    1536:6WRM+Mmp39juYb43EtvaUfBtkWD5km20nshRM6IvOgWspORGWdx5ljGuVH0:LMmp39juQ436C6XkWD5km8hRMXvO7Rjq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17f2bc4dcbcc67d741af705bd362f4b2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b639c3ebe63597bbbf1e5ed971154040

    SHA1

    e53139851eb0e895f5920a5cf89be602bcbe4bf9

    SHA256

    d511938e6b06a63a104fe92cb8a504b4ea7c757c1ce54383ea3ba855a548dba6

    SHA512

    73a3d86f52a38f923d7fe8141e8222577a8463dd532e6b93fa447c2dce35035b1af8259f847db807e829a6d07ed8c72c2838579c95ed1a0d44c35181b35bd9cb

    Download Submit