Overview

overview

3

Static

static

3

43f1c7e6a4...18.pdf

windows7-x64

1

43f1c7e6a4...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 01:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    43f1c7e6a4fd26ece7a1dcb4bf0d7d10_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    43f1c7e6a4fd26ece7a1dcb4bf0d7d10

  • SHA1

    ff355c0c3399aff071120d0ca5150299cc59f5a0

  • SHA256

    76b6aded361dadaeec8a4553990e2f6d2f89e4f391517165ca85bb7ed7ecdb46

  • SHA512

    559ff1a87e33b82ad4df3bfd19202178ca1e6a48790381391fd8c9b7fa818eb83b0fa90dbf80d6dcef02a4ef2d0ee7dcce7827d635b30063fbf024c842e3d6d7

  • SSDEEP

    768:8gGzpD5pfzWFhbIYvkY1oYVmufA5qdL8fKkmwsyW037cdiAbpiQgOvQmXmEUphK:ZGFlpcoEmR5qJxJyvYgAblgOomXmEUpM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43f1c7e6a4fd26ece7a1dcb4bf0d7d10_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b1157f0b4c7aa534a33f45452a0947c5

    SHA1

    01742e9a62c262eec6e269309dfe7fb5604ad63b

    SHA256

    08b3b480f2a39a3cc47f25a5545c25e231589ec19951bd6c5c42adfda51426a0

    SHA512

    11222e3f9e951c7b965ea705ed7881e459526e7dd3ea2ddbaa78ab0f46a147aa27f0c593c3d353c861314a2479f7a2882c2d5ecd512b701777208114afa77690

    Download Submit