Overview

overview

6

Static

static

6

fe44594ea1...18.pdf

windows7-x64

1

fe44594ea1...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 02:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fe44594ea124e251750fdc685360a5a4_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    fe44594ea124e251750fdc685360a5a4

  • SHA1

    77efee3328ff36258dc5cdea28135475d27d8695

  • SHA256

    f35693f2df6357050093b84c3cd9647d1c424982bf4cb520ffdcf96816200739

  • SHA512

    e8f22d942c408be63eb62ca5d989f6399420497479bdddc2cf9c3d1449a41b0975901d9fbe33058864570e9b5d066589141671f45a076c82c64c8b32501e9d53

  • SSDEEP

    1536:g7HTJnHnATy3URrpU7jA4qk34R7cZAV+c31ljo2Ah2A6WspOC:GZnALH1234R7cZW31F2dC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe44594ea124e251750fdc685360a5a4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2176

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    03c2d1b287eddc05489a55ab9cd96052

    SHA1

    963369082b61d20b209c60d22c59b6bc1ba2775d

    SHA256

    d8c5fe14fae46f37c485e8c38842765f3267a3a2d3032c700411e6d020113df4

    SHA512

    741557a7b753305db55e250dec7ddf84c717443dabe9a9cfac2c9172d0dcd144215f44fab9d6d00463f4ca490d0969aefffafd5ac068119046de8ff27bb2836c

    Download Submit