Overview

overview

3

Static

static

3

cc83ab054c...18.pdf

windows7-x64

1

cc83ab054c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 05:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    cc83ab054cb29bf677a33e806816b065_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    cc83ab054cb29bf677a33e806816b065

  • SHA1

    bc1384f5976f9e551b381586acf8f7563be04006

  • SHA256

    d404c1c6b48a187ebc9d53517b74a23c543ee7630b030307c2965b2d9ff25b2f

  • SHA512

    3aa399003f5ec5f7ad181bef810d1551c92509b5af17e4a9808dbc8ceb5dce38e84e346275abbebfe0888a9e118c2ec6867a37eacafd3f52808410a74cfb6e25

  • SSDEEP

    1536:lZBgqDsoI+3U8aVWgg8eF7ghoxQeTOS3qu83F7KPofdCxZw7mj1t:hDsoI+3U8aHKmIq/38wfdCx+7mT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cc83ab054cb29bf677a33e806816b065_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fe9dde1c2ee26280d75605f845e76e7f

    SHA1

    87f34d31ece86e1e18011c2c9f8ae35a7413cf10

    SHA256

    5fb644bb618d553bdbac54dab014915451b5647505c6806a474995b76512dbe7

    SHA512

    2616332d61ec74a24877590175032ae26bbb1e8e91fb103ee2f8baf2fa67880abfef912a86954470d3a8539ce07547cb1b482e3395377084c9bf4d6162dc4a91

    Download Submit