Overview

overview

3

Static

static

3

16fb0be0af...18.pdf

windows7-x64

1

16fb0be0af...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 09:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    16fb0be0afe0fc7f22781dc9aa0f146f_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    16fb0be0afe0fc7f22781dc9aa0f146f

  • SHA1

    ce4af11c73fcfc4e6dc72994c02cdf5c64dc0760

  • SHA256

    2ae074fdacfc4601f25a0f4592c1d00edca7487299ea43c40918009a86858a9c

  • SHA512

    9e06044950eadc1c1fda092ef5840cb8641a331b486c2cd78b0132f08fe25fcccaa676dd20d5dfb04aa36a29bf953967ed4e774c544d01a2bf00bf220b2fc9fb

  • SSDEEP

    768:zcuhJdik6XV7i/OyWOEmDBmQgd/UsdVi4Fpk5xaXyhdpv6CQDdNxQJzF/VAlx3Le:zfhfiTKig7OsaVtJCL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16fb0be0afe0fc7f22781dc9aa0f146f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f0d20024abea943dd1c6a10a539e7756

    SHA1

    494b595375900f4a16a8d1c594c9fa8e9eed8964

    SHA256

    e9a98cd98524a2c28c028c7389db45d98db6c64fe3670f89610a29d96a4aae88

    SHA512

    7bc2f8d801cc0a9b72b3b5b70ecde538e7a82b50b902a81bdf0c2575b0e8ba88e0956f89ddc4ea6473933a7621ec6ed1b082f3bbe41dd0c981881cc53efa7d1a

    Download Submit