Overview

overview

3

Static

static

3

df4a7011f9...18.pdf

windows7-x64

1

df4a7011f9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 07:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    df4a7011f9e91f34980e8ff8032a76b7_JaffaCakes118.pdf

  • Size

    95KB

  • MD5

    df4a7011f9e91f34980e8ff8032a76b7

  • SHA1

    1f91be7ced63cd7d17672b6a144bce1343dec1d6

  • SHA256

    12b7523c00f4f34fe2dba90ecc8ffb7bec009f600d6a0308f7ab1542ac1b72a9

  • SHA512

    94d23d2dea74d03f9bf9d383114c1540b9f1bb121a2f4e171d89f5c76d337e13837159838f12bcdc49f8a528bff95043758c571f9819c280317293cb1e85e72d

  • SSDEEP

    1536:gBFGEbtWpkkDgnNE6qIEIdoAgFp4nlwTTeNdnPvfZg+eIb3YRo6bTRvirWypOlLi:aF3WvUodIdobFp4nlwHGdPvhgpIb6Ra/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df4a7011f9e91f34980e8ff8032a76b7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1214fba1e5a4b03dfe3a274b22d9416f

    SHA1

    a3641b9335e768a0f9ea14c712fcdcd1bc3e5b09

    SHA256

    f845b1a63c68655a74cc6578f9d3eba062314e6db7fe49507561377ea20836e3

    SHA512

    b9feea51f543255556da5ef74381a67362580ae3870ca72462d26b5432d9e5ea86046bb35701cd30c0a14faea2738a6c5c436599498d5f46f39a42b74246392d

    Download Submit