Overview

overview

3

Static

static

3

dd4fb4ee4b...18.pdf

windows7-x64

1

dd4fb4ee4b...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 06:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dd4fb4ee4b0d98bb09d44cfef96ddd1e_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    dd4fb4ee4b0d98bb09d44cfef96ddd1e

  • SHA1

    2a70048b3687dac37cd4595cd008f30a38f375bd

  • SHA256

    abb91098c781acc031257b7a7c041dc4a9d9422924b5d991a9b04bd789db61b4

  • SHA512

    fa81823d1e10c6c2409e2aa5f2c65ec84f80febf20b78a8b5855158969d9b2d43c06622b930c75606c0035694e911359c56aba92c80c1304d392d83af6a28f6b

  • SSDEEP

    1536:JkItncmjvCIt52LyjIgqsrez/tBqVbPQoWr7RSqnKQX2w1WspORHqF7kxq8q:vcm7VvzzqsreTsqKQGw8RKF7kx0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dd4fb4ee4b0d98bb09d44cfef96ddd1e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c0176835cc5c44b0e8f9a0178e86624c

    SHA1

    116000b8136ce671668f128215d91a40156296da

    SHA256

    1d77523a2a7deebf609e53ce8ffec4f2dcb397a8fe1cdcd5820aa8d58abde931

    SHA512

    d2a95d26fe38e555ec714ae99193f687b26b6f3586856ff82a498a48c66feef8ba29ba65e2d5c14d69b350f6cb8d966899514ed6dd414baff3a77528ae38290b

    Download Submit