Overview

overview

3

Static

static

3

44d0c360a6...18.pdf

windows7-x64

1

44d0c360a6...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 06:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    44d0c360a6ef4d7e690b1a0954aba180_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    44d0c360a6ef4d7e690b1a0954aba180

  • SHA1

    2a7dcf871166c4ac9b2084da20ef1e36d3ec0b86

  • SHA256

    52c01fe31af6c189700d34e524588352231fabfdd4132000fdd7f90e429b54e6

  • SHA512

    7d3bb24219b2f8ee0387230c9dcb3d50eeb44240ca4e3dc5e01f702678a7ca0a4df09388aeda6e473b88121d0e252c8e94817fd3d3c34b82b26f1442d6a5b20f

  • SSDEEP

    768:ugGzpDupaDQcX/F3QNoxxnlk7r02xFmuyS22UBisyHf0gMX4zaae4Yt7OR41:LGFCpr02jjyJ2U6gXphFyR41

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44d0c360a6ef4d7e690b1a0954aba180_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2492

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ac3fc54e0a73ec6e0d2ab7b97e12f6c0

    SHA1

    c0bb94ad538e97120722e552b1fe94380a2b8382

    SHA256

    dbe1297de52b76e883c00ad534f5e1f3138aa6167d937c7c5ae9c8b37f44fb5b

    SHA512

    e7ed12cbfd46b3665b3479bbac8d5c319e679bfcfb9e4d2e7e6aa40f310719bb009629c00208a1a0781c8ea2ff6935f27a9a36738a97eb755d77b0d23b2f223a

    Download Submit