Overview

overview

3

Static

static

3

4c80acb1b4...18.pdf

windows7-x64

1

4c80acb1b4...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 18:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4c80acb1b444d76170f2f0c916eee82d_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    4c80acb1b444d76170f2f0c916eee82d

  • SHA1

    eb7cf27c397dacdf1cae0e8ca3e71e40b75dd722

  • SHA256

    fbc54c7b3b3a039838d6fe70b0e9ab2558606303d0c9236c7379b699ac3053a5

  • SHA512

    75ded5d8c5b4016266c416f9d87f1f99c44c28e18f44dd8066f552be4a5ad8b86e493556143ee887d9ca36c52c6ed39ff7cfa6b3e54702e908049815b402fa45

  • SSDEEP

    768:1gGzpDm86zbbUI5/c0DcbUG1DNtxc75B0mRzLGkjaLEh:mGFSoRc7LRHGkjaLEh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4c80acb1b444d76170f2f0c916eee82d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    52e4d33de44b6a21da313f6a2f464fa3

    SHA1

    f3019ae3e350a5bd6909da627cd0f6d36d4843bf

    SHA256

    51bc45e13f750902ff8d708f8021ef451e5a12bf35d7187c3a6bf04253e40cfb

    SHA512

    2cfc1fcbfb88ee93d9244ec45aa1e40521a9af83ef817c1cf645b4d90844b9c1516122c66d388f2ed550b2d3ec65c26568d4f4ac21192b48ac9fc9d37253a37d

    Download Submit