Overview

overview

3

Static

static

3

ff4612acd1...18.pdf

windows7-x64

1

ff4612acd1...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 12:26

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    ff4612acd1ae434f01cae2dddfde9b2f_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    ff4612acd1ae434f01cae2dddfde9b2f

  • SHA1

    a48ddad177f8c5aaee503ab57416d8e9c47c96af

  • SHA256

    34fb5f6c0eaf17f569d158de932a193b394ff072217c0f9d41e6f66da1b36d9e

  • SHA512

    b108c9c667ba23fae4e2c4103be0818f8625a3c22e61c5f519284d81d057f59d0d49c8af149d0985af1190f2e7f1732b96a9ffc351a94aa3d775d902d734ebdc

  • SSDEEP

    1536:KSHwsTCUXtBsPF78BoiW0o+IhW/kbsFtztFkJfEf3D9W8pO73WnfuaOhEJcFTu:rwbUXnui1QWM4FtztyJfEf3D87yzJR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff4612acd1ae434f01cae2dddfde9b2f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          fa728347349452f7b949ef3ca6c47964

          SHA1

          3d9395e647830a4a535853e158787f25551cdca2

          SHA256

          186d84e74c4e8ebfe14e4ff757bea628757f5319c98cf11cdd5899fb16a45ed8

          SHA512

          fb6aefaa298b718fb1960c18fe9cf63a9643fb6e80c05df2402dea15aea97cf00707e72b0744120e30d29ca25c1b589f217af40f14632e83406cca9df1f08bc9

          Download Submit