Overview

overview

3

Static

static

3

13e4f4d6a4...18.pdf

windows7-x64

1

13e4f4d6a4...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 18:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    13e4f4d6a413439b6ef90200a9d3dea3_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    13e4f4d6a413439b6ef90200a9d3dea3

  • SHA1

    4221d16a79ab94fcd1359462836f231a45566492

  • SHA256

    2a3b4497c82ad112300e6cf1f13e6acd6e616c42ff9f8db013b940400c68edfd

  • SHA512

    e19df3feb2f4ff10e7e6aee8674c8dcbc3505e8acea4392dfb2e0a01d014669d47f13a04e1ad5c2b3f315a2c08cde1f4cd6def077ec0ce3c75134897ed201057

  • SSDEEP

    1536:CGF7p6eMC8bxGdDR3ao11oCxeZjXwE4nSX5bXxoFcMdnniB5aJus:7F7p6rC8UdDR4/5bXxoFcau4v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\13e4f4d6a413439b6ef90200a9d3dea3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          787c9b18f94b6390364aba9ffd4e2523

          SHA1

          6233f74424a91bebd6275a2638c1cc0f78dc52e4

          SHA256

          9889029cf7bad9d4cfce80790f92966f67494fc3696f8dae95725dd50045c1f4

          SHA512

          f87b14e5c5860fc5aedad0cb764c0af7d105debbadbf06c26440b1d49613cba692c63b441f50e7e8926b69596b208b82a4a9e9de1ec83ff1836f08a8f227b44d

          Download Submit