Overview

overview

3

Static

static

3

d1d1a6665f...18.pdf

windows7-x64

1

d1d1a6665f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 10:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d1d1a6665f29c83a1ccb90b87c8ac983_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    d1d1a6665f29c83a1ccb90b87c8ac983

  • SHA1

    3fd849544f46779b10ae1a98cc59ebe704684cbe

  • SHA256

    d66ea7b2fa0c15535a375a264ab5395966428c169dbf6bb720762fbb40a2f771

  • SHA512

    add5e8e94462484b4ddf562665d436e43b4584a49b2c8636c1980d9419987e0c3bee40890f4142df75144e3b84276adac1bc6fe4e75f4821c66591e507e686ac

  • SSDEEP

    768:rBAvkGet68LFNvV0qYnVjYEVmpPv1a8sPlwDVl/7rfVJ3+4wp:avkjtxLjvb+NVmpdatPlGVl/nHO44

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d1d1a6665f29c83a1ccb90b87c8ac983_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4e75f89be31bca33e592e7668d2860dc

    SHA1

    338c2d961df75d98c650b9788e326a94c3a5e52b

    SHA256

    2e5b40449bffe515e1f4ccfac19727875e99f04aabdd51bfae2763d586598ccf

    SHA512

    42faa859b7c8247202fb07af5801b4eef8a373bbb2e6af78c7728093eaf5bcd54404aa0c655922ee472474f411f8f2c7f45a000d7c8a4263d087060323558c86

    Download Submit