Overview

overview

3

Static

static

3

16f1e35dcd...18.pdf

windows7-x64

1

16f1e35dcd...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 17:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    16f1e35dcd59d9e9ea305c6faf28b8ba_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    16f1e35dcd59d9e9ea305c6faf28b8ba

  • SHA1

    fc3edd2549cc99e49a5021d21b7ccff11a0238ca

  • SHA256

    f072e13cc437e1935d81ebaf3aa397d28e98f9d70549fdb520b43c19da41ded3

  • SHA512

    d48e7dbb6410cfcb2a847ca5d739818c340efd0041d0c8a6f20f7cca7fac11187f2b1d0ba84f420d88940bbdd30f1a2ecf40f1207a1fc97b4635a0d166dcf294

  • SSDEEP

    1536:hAiIXsssknux/tdpKd6yXxRQ646kMy25o/kCkBobdivKBSzfckIcCFtBUd2:hXshn2//QW63kM5o/kCkBIivKkzwcsBd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\16f1e35dcd59d9e9ea305c6faf28b8ba_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d85913fa46cee5632badf8d5734fce41

    SHA1

    9dcaaba57ad01a3f8e2f2bf04dcb243ac213260d

    SHA256

    cde6124dd72500cbdc7bad07716aa5ee159b61405034fbc74f0996872d57f605

    SHA512

    3a6eaf5951490af03df2e49007e3e24d72ca99c52a9c261a9a788a09078f7c402d886d0c3cc127e6cd62ae82d66c8c9b3352ecacc6a5882022aaf0c88620a977

    Download Submit