Overview

overview

3

Static

static

3

ecf53e94ac...18.pdf

windows7-x64

1

ecf53e94ac...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11-04-2024 08:09

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ecf53e94ac2d5d0d6059e9f47ba1e2b4_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    ecf53e94ac2d5d0d6059e9f47ba1e2b4

  • SHA1

    ba59365528a3a212f6bad42d9e8daf718451bd5c

  • SHA256

    2d951b07190b91983d869117995656a6d51b050f23e4e59b3aebb4e3d8de5aa2

  • SHA512

    eeb7c0e91d6d7fe35d0de8f2d5076a6f55ed3af84eeec01b9ddc0b257f1a63a25ba0d3f90e3c99921e89df675ee9ff8c72c0e00a92562292dcd0a24c7373d66c

  • SSDEEP

    1536:Zmi+w6Y0eUlOP4XuAQjGcsHdH4/ivmVsCRKkS+WkNpOPx7WaWpWNxa:/+w90J7uZycs9HQ7RKkSjPx7W/Wa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ecf53e94ac2d5d0d6059e9f47ba1e2b4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bb9f70cae9b3f90f716af32d60504ee9

    SHA1

    d355e77b081141a1653b56b54fdbdbb91ae0c868

    SHA256

    f9eaf1678aa577027044f7282b72d419b5db56793b6fb339eac6f6f405069d58

    SHA512

    c204b11e2e616bba22d6d181060aac05b88e3190fe31d742b0d9dd60d0de835d0ee4edb5f4655940cc84ecbf753d0a224650053190ac2cd59997829563ab44c1

    Download Submit