Overview

overview

6

Static

static

6

4f94825129...18.pdf

windows7-x64

1

4f94825129...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17-05-2024 10:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4f94825129eb87f3fd16809dc4e31378_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    4f94825129eb87f3fd16809dc4e31378

  • SHA1

    ca00a8e80f33dcd4bfb1a6586a182161015aeaa4

  • SHA256

    b89906eaf04df7a0292c7380540449ceadb4baa2e0d9104c9d024bc93a467a92

  • SHA512

    a5ff6c006901651a497e7c7e3c136cbdcd4734034407a72542299fc75ff1410fd1101f67af121217d8bac9eb006521e1a4c984b0d54bc3cc7ece44f91181115d

  • SSDEEP

    384:4WkSbknHZV/NmHYt1cfwEO/3EWwSKt6S0ie4zQPnmJO1Zc8G3:4Wb4n5VMH3gwSNBd4zaVZcj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4f94825129eb87f3fd16809dc4e31378_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    be45d25c53981d7556d2897cfb50d7f0

    SHA1

    990767031ff1180bfec54153e2f4e44d7e4516b9

    SHA256

    4d0e3fde8ce0d5c7bb62277419fc2aedef2e04cb2943569f69fbd19d4dc2c3aa

    SHA512

    ad6f0cfd57aa81e7619ac7a6b4e1c1825a7b7c99e082b5790a7ddf46d7fd6e4f7fd96822e28d94376a4061d768ec0e4035103487c20db7905799d7fe2c2b7a1c

    Download Submit