Overview

overview

3

Static

static

3

f4aa812c70...18.pdf

windows7-x64

1

f4aa812c70...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 00:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f4aa812c70ba17ae5fe9a5bdd95a454c_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    f4aa812c70ba17ae5fe9a5bdd95a454c

  • SHA1

    11bf0ed84952878969f7bf42cb39a682a5008171

  • SHA256

    c3a20df3a3309a1071f7cb739ae85b17b5abacd72ad9472868b84971d6c912ca

  • SHA512

    8d1b6678df619fe470003b1cb152ba11af2e4cae0feb03eff777004a922f6e96a558403ece748f5f327b972176b0aafe1019ed7e2d045c75106956d0dda348ec

  • SSDEEP

    1536:/0JYIIMyB9Gt7vBlYg/26uYGii8ar7f5RWGpOK6/LZHbWzCIFv5UXm:GYd8t7/b/VHGxrnsK6/dHCTt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f4aa812c70ba17ae5fe9a5bdd95a454c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    57b743faa790000ccb7ae94d4281bc76

    SHA1

    61e050f29906f9ad831d7f839c53f789a0dc1572

    SHA256

    049d3e3ca6c2aa5aeca3f3dfe23534417e3ba3ea4f4adbab2da925b9cd94c139

    SHA512

    f7ceb08deb507bd8a294eadc209f4571d25912606e63be6089c565318c421e20818d62d6e6aa588424af35a2b0386d7ea94b048e976a0fbcb66d461a6b2b8e37

    Download Submit