Overview

overview

3

Static

static

3

5ce4d17060...18.pdf

windows7-x64

1

5ce4d17060...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 03:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5ce4d17060bcfd65961898ef2c5ded18_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    5ce4d17060bcfd65961898ef2c5ded18

  • SHA1

    42b8954c0eb6808683ffe7611989a4445513f665

  • SHA256

    ec4da1867bee8efb3d75666d494f6ef231f38beb35d21eb2fb96e7aa95d89661

  • SHA512

    ddbc00a1b0cb3e5f6a2fc97b5a647fbdb20d717615b0ed1b6e359e504a89dc8cea300a6aeb8052e041bfd57af8de7803911374427d1671130ff62acfa18017de

  • SSDEEP

    768:T7TJRFRGLOTxDaqFs6Z2jJsb/oTAKN66LbntPbawjSia0WD1Op6Y6FWlMsSE5fXT:T7tXRaKxDaqFs6Z2jJsbgT9NhtPOwGi1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5ce4d17060bcfd65961898ef2c5ded18_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b572f511852f6d83a5ddb5b7f28e74da

    SHA1

    e041ce3b6bbb89f7c28604dd927c3629e883dc11

    SHA256

    f6b25500e1db9217c54171d1ea2e00338d4a8e79648d7e2404e8bf7f2c51044a

    SHA512

    1559d6e6281c199a9f353744fcc8e7671d273d81cfb25f5b2cd388e165f65549cba9b2271afcae57e3a25312528807d7199795562e8780404647b0d1f1f7a487

    Download Submit