Overview

overview

3

Static

static

3

c1de3e0aa6...18.pdf

windows7-x64

1

c1de3e0aa6...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 20:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c1de3e0aa67a3b3b387b67f849cb272d_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    c1de3e0aa67a3b3b387b67f849cb272d

  • SHA1

    d6bc2b168fe509c80a01f58079ee7bb5b38640e1

  • SHA256

    a45de9f80dc728c1902da0a27bf145597895804a8eab067b472cf83f7e9f92be

  • SHA512

    a30c4a03b01c5c1c8d902fe5bb0daa992e5eb273525df5ca451e968bd7afe471f56f0be208124cf6062e376922e506d9f4fd585e5499f4b3489c384cadc8a9b2

  • SSDEEP

    1536:5USfO9nTeyML53dCyb+lWwhQ4Z/7je2wblW8pO73WGwLiK5uz:ffd5tylWwhQ4leTbk7Jwlg

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c1de3e0aa67a3b3b387b67f849cb272d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d05a7f54ecf5da46f0bfe6c1596a67b7

    SHA1

    cee22ba669841f330dd834376347d47106ae8ded

    SHA256

    592a9ce09454618f7169c4bb49660a1fe8402486bdc40cc464ae73e29ca2012e

    SHA512

    ae6ea0cb32c54e1df5d3836f000169d396f465d5f606256fb1dba572ef71a63995c2babadf4b6643589bd0bdcc00fe4d8e96ab8e7c6ec45c110dcf0cc5e71fff

    Download Submit