Overview

overview

3

Static

static

3

37470f5c66...18.pdf

windows7-x64

1

37470f5c66...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 00:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    37470f5c66208dce382a1c4c2a2f50e4_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    37470f5c66208dce382a1c4c2a2f50e4

  • SHA1

    ccf56ec2d92e5c815ee0f2acc7d72449784e644e

  • SHA256

    bf1c7b3d67a1f12b7f0ba014ba34c19dd3733c31012d2f8440a06335063656bc

  • SHA512

    e20fe20acae8100fd80330ec44f069b90f340dfec92d8c8d5dfefdcd4f60518f6a4bc7bff4c16bb67dd04bd68f60a900e1e9ca3b594bb70a6801e6f9cf837345

  • SSDEEP

    768:hgGzpDqpUryjndCkXqK1ABK2i+RHnW5yP29U/j8yjpKj4iPNrDlALNpi:SGFmpqE5yoy9KMwrRALNpi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\37470f5c66208dce382a1c4c2a2f50e4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    47dbce4c2a406018b973a436c38dc35c

    SHA1

    e0606464034381f0927ba2007e1a0923a5c50307

    SHA256

    89b3650eb36b2a3f4f6a3609976cad5479c8790e2d5c2e987b4861115fbce14e

    SHA512

    76562bf98f7c7df905bed5f024105965f1870a5b1465302604fab7d7a9df7284897b5e76a858cd6a380f601a66368fa6c8f83727d2b723c348907754eeb08a83

    Download Submit