Overview

overview

3

Static

static

3

ebdfacba65...18.pdf

windows7-x64

1

ebdfacba65...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 19:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ebdfacba65fff7e47d8b6b650a0bb9ec_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    ebdfacba65fff7e47d8b6b650a0bb9ec

  • SHA1

    ac4aef31864e9b87aca92de61370bb0aede61e98

  • SHA256

    954e39d5ba4ed0bd6e674793a878bb70f2b6bd0931eeff9ed59fa1464f140626

  • SHA512

    4b96ddd0e2269b314124c6724619900567a056d904f92ca66472a9dd6edd36abeb16b25a27508274a08c59950c2b406ac2689782f2934be2bb607942781cf545

  • SSDEEP

    768:pt41/BYQ8dKYW4sq4gCpw4kZASvQoV03LU3DV06pFIe4X41uXZZ:G/ByKYWeCC4szvV0343DxFIe4FXZZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ebdfacba65fff7e47d8b6b650a0bb9ec_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    430848573a78d6ff997e2d40d0709ea2

    SHA1

    79ab8d589d11c28207331aabddf3d845a243fd89

    SHA256

    60c2bfe49c15e4e7c97a4d317a5f11d2c335f9f3e9ae3e7f145077137b0fe4f8

    SHA512

    16846ea0bfa1e4695eb8feabaa1495a65bf09fcb3e66d8dca61bc1a165cbc8458452a6a5accf04ee7864ae4362d9b01e3de8cb34da597691bc7bee2f5f87f7d2

    Download Submit