Overview

overview

3

Static

static

3

20ec1c42b4...18.pdf

windows7-x64

1

20ec1c42b4...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 11:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20ec1c42b456fb28525d5912eec90bc6_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    20ec1c42b456fb28525d5912eec90bc6

  • SHA1

    b856955568051901dc228b8317b1589dd845460b

  • SHA256

    e37f88a81a55ad3f931613bf10b7b552939d13f9a86f74ec68806b8a89308531

  • SHA512

    d18d1283f1cf18aa5c3491cb603584e5054cd4403be22b96017d7553a7191dcf12b15527a28c791e9eb4c498ebc346bd21cb983d679ff89065789850a2a8b22b

  • SSDEEP

    1536:BOjk53BKM4ERZ87YfWaW0MAM1b7NJ9L2UymHesD8eyd6mEQPWmJG0xWapOnPxg:b53QoRZ7dpb2NJ9LTy0l+bEQR80yn2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20ec1c42b456fb28525d5912eec90bc6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0a5123ea8427dcc8c7909ef0382cf8ba

    SHA1

    83b0690d861d094ac3b4a13a5f146ffbbde30615

    SHA256

    0f343db4c595fe8360b3e325709584b0d454c606d4a49ae0c6c4b0caa2456bb9

    SHA512

    1cbfa8dc588969d39db755dc9c47e1bbeaa2b2c6c77bbbfb930fde8ce8037830712a930cb9b7549f4681225d04f48a688b3aa2851d4a0f3bef9e726dcf169d63

    Download Submit