Overview

overview

6

Static

static

6

470b461018...18.pdf

windows7-x64

1

470b461018...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 16:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    470b46101836636d4c3f9f27dd73199b_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    470b46101836636d4c3f9f27dd73199b

  • SHA1

    22063c601935b4bc997ebb3c75f33c5a7a801db4

  • SHA256

    87d73b788fd0a0ed74370c1ee07e07c17487718bc0000bc5d5e428d68bad4426

  • SHA512

    31cfb9567fcf40d7c88a122c7b2c0c4a195eee1cacdc456c73e59ace332ba32a8635b49f8f96f36e1f843f81af2c70d584553430c59e199c8c588c29b0f703fd

  • SSDEEP

    384:peeikFZRFuBCM46ReFxaroI7CC/0x2iMKW+PVSbvX:peet9Yn46ReFxaroFC8x2CevX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\470b46101836636d4c3f9f27dd73199b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2531d462e25ad10829a668a1e3faef02

    SHA1

    4e64c32ae8822bb1485795dfea13cfcca8b4c628

    SHA256

    e20d95a26ef82bcf77f320d0dcefc96c6943d53ba8db8d1e85a85e86273f1ab9

    SHA512

    30e83c013af3f44cfdbf44fd4013d17e1f581684c40e5f6134112b72a2dd1cdfa11235d0196e3d5efe3db6d92bac44325024b15f3615a562f3cf90ce59772e70

    Download Submit