Overview

overview

3

Static

static

3

ec502f4b08...18.pdf

windows7-x64

1

ec502f4b08...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-04-2024 00:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ec502f4b08068d37fe5f8fe36a455d5f_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    ec502f4b08068d37fe5f8fe36a455d5f

  • SHA1

    d2e78e5703abf0e95bac60d16fa8b61ae7e49630

  • SHA256

    cbc475a9afae9bf58e47eec8af143c017fdd33e29fa99fb33a77219b1c01fe53

  • SHA512

    cffbeedbe522964f7eea1b4d9c820cfdf361d19cbd9a794c74cf7e635efc6fd46084b2d231c4858b2f1c401e68f984fed84e1df85084f93c576301264a7bd38f

  • SSDEEP

    768:PyxSqmGHWZMBsd7s3lQFEfi3WpEuKXv9eWcyvAyJQFk+quZ6o:QmzQ3o73aEFlbXJQGuYo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ec502f4b08068d37fe5f8fe36a455d5f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f3829fddb33287ea9549036f2e6fe006

    SHA1

    9fea1a29dba07a6189d241dced74431f702ec0ac

    SHA256

    785d594c334d812891b374600a4243733eaf31c619ab044135b471f76741d7b3

    SHA512

    2a84130542f9e486d29af699be4f4f437629f41b714dd8fc54ae904188b544436f0664ae8bb5406df4b421c01e04117bf02064fa8677346dbf52239803132e7f

    Download Submit