Overview

overview

3

Static

static

3

c504166b49...18.pdf

windows7-x64

1

c504166b49...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04-04-2024 23:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c504166b497aec1e70b8354269af7f3f_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    c504166b497aec1e70b8354269af7f3f

  • SHA1

    c88c13ba44f62124d72bfc7d192bfe4597d19db8

  • SHA256

    a690d5598683493f648c1e25214567fcb8ebdaf6bf08ddeeca5082e206f02acc

  • SHA512

    bec81c80bbba01162b88730d4c085c0147e0417bfdd716a6a9988c36911f0919d05fe7bec14144a442863ad0e2232dca872a03e1c6a6bd8f5116e269fe47d104

  • SSDEEP

    1536:nVA2C9zJw6BCAjeWE6jO2gdfRYA0sLW22xtzaD7PY4LcI3iC9W6pOu29u79WaJAq:V1w3RSV6j2f90vxtS7DSCOu2e9u7W

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c504166b497aec1e70b8354269af7f3f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    993640041f75b235ca1b42a5725a7f54

    SHA1

    387de68dfa15942d9fbad87482b21ab11fe9d7e3

    SHA256

    e3884d42bf95270847e24955f61a63fb98a975bfa4b0502c4ff41d0a3882fd3e

    SHA512

    7cc5fbc165ca84b60a44a2b0c67d5ec5a32894c3c06787d49d4b90f72013bc6bb826bfe732711834522e6fb39ac2824d0aeb9d0efc1a6abfe53d233d850493c2

    Download Submit