Overview

overview

3

Static

static

3

12edbcda44...18.pdf

windows7-x64

1

12edbcda44...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 13:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    12edbcda44b7476d771680fa37ea63ba_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    12edbcda44b7476d771680fa37ea63ba

  • SHA1

    c981f8973d078ac11f6af4338ced3aaee47bfa36

  • SHA256

    758f08dfb6a73a0fc49a8f7bb6debbae43073d25a500e270a40bc772680ce8bf

  • SHA512

    1184ebe517baa8687dbec3c6455c83547fd0cfe5a78460e4c91e925f3b3ed9b4ee15d7554765ec4d683a4771f0b44e838a179f671666c146df5b19cd0f295e31

  • SSDEEP

    768:9XuMZmwgCLWarym9Ky5wN26KSfCIMZk9kkVWogo04X6AGBhOdVxyDuViTwg8HN:9XFZmGWSyGbF6KiCIMZk9kkgaKvjgiud

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\12edbcda44b7476d771680fa37ea63ba_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ae03b080aba1e79fc4cf75b54bc7d9c2

    SHA1

    4859e243a8a9ab0bf81a2d30dcc41d457dba0fda

    SHA256

    eb99ee61f57e92f065d01348cb20e9a2e6ea9883c8963b0bb087cd12a4b6501e

    SHA512

    2faed8b0b775a60dbc2a5d5ce20adc2e2b20f6ff536178c639959b9de81c73bc9e8ec7d18c02ab46b7effcc92d35685904e5f170bfac0e74917b4430f496b797

    Download Submit