Overview

overview

3

Static

static

3

af020442df...18.pdf

windows7-x64

1

af020442df...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 15:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    af020442df24c23d430806118e7d468e_JaffaCakes118.pdf

  • Size

    366KB

  • MD5

    af020442df24c23d430806118e7d468e

  • SHA1

    9a671fb6e050cf3feb5883a7569e1a3c1d7aa6c2

  • SHA256

    b068f410993e5cfbc4a96ef86e93ba7001ce4588255e95fb61e7f3ea32a06ace

  • SHA512

    c91533820cd06d0bb945c0086453e433955c7d9946367e5b55bcf31d35c65204c39dc2c74f9e161e485f2b97fbff56a07b607c843ce652433f18561e44340459

  • SSDEEP

    6144:CW0VkUP5UAyBWAC9b4aDp01I0DMzS4Nk8FhjPjq1yEdTTbeUZIWhTAaowcrz6dN:1IkUP5ULGbGBQzS8FFPO1yYIWhEaoS/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\af020442df24c23d430806118e7d468e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fd39b505f3749991479c4a166a0eea81

    SHA1

    b04587c6f89485c54949b3f3f3c3805681a3b98e

    SHA256

    568561f15a93a1a64323e3a92e74d30e51cd1b28880dff0df34e45d5c23810ac

    SHA512

    dce6ae2a20cf1bc2689f0b31e9ed28e8acf8ab5cd2e3446fd5cdc5f539fabdf35ef00bff02250b53c7555fd36244b7e35f3baff5f9a316d938dd123429c6bb8a

    Download Submit