Overview

overview

3

Static

static

3

d4007d34db...18.pdf

windows7-x64

1

d4007d34db...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 12:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d4007d34db822708bfcc9783acc06cb1_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    d4007d34db822708bfcc9783acc06cb1

  • SHA1

    21821a2dfeaf4979a95c1ea8bb4413c40600fcdd

  • SHA256

    edd04253471e77664124506edab0dacb842576a63204a9f726d058680c1351bf

  • SHA512

    dbc4aa9502160cc47af3f764e65e6d2bac023d4b6b0e9c0aca0cee90d5b4cbac26786e2159315c5f9f2403269f2e174ba1cd84e654e5ee5450baa6b80a0325cd

  • SSDEEP

    1536:WMaRNWZjn3k4kKa4+KBHKEII9jsmDx9DoW6pOu26WLfVM85QCfgb0CUuEJ+:JrZjnU4TtNII9VzVu2R5Q10lU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d4007d34db822708bfcc9783acc06cb1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1904

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    77ca699ae7457e810638214498280425

    SHA1

    dbc11415cbec74b21ffa417e90908c5c3f1ca352

    SHA256

    09192cfb056602d3cf59fd9e7b87691eaa56b9d17df9cb542c2faaa806632bd9

    SHA512

    b7f96edbc5806ec6ee526145f4b62ea609d3649acc5961b5311e48784de10316db39755b064330b046ea258523cf84eae498e36d8c0b82de1582f66529db71e0

    Download Submit