Overview

overview

5

Static

static

5

4cfedbb0b9...18.pdf

windows7-x64

1

4cfedbb0b9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 05:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4cfedbb0b9d791b59f7356c6196c0200_JaffaCakes118.pdf

  • Size

    10KB

  • MD5

    4cfedbb0b9d791b59f7356c6196c0200

  • SHA1

    a4317b1161933f44fbc8380775faad6e65d009ab

  • SHA256

    bd05e27475a97ff7398bf22eaf803ad8e4e00baaa1d630badfd59ea06b6a0ddd

  • SHA512

    e886783ab6d5eb8f58207e275d2af1a14d07a4f0bf24a35562b5c7903838f25ff6be6ada49644ff1043a1a3433762c36d99907617d9ea3e770f2e57fa05601c6

  • SSDEEP

    192:XLFMlMOLp6WL5M39LCVGKWH/SFW/z/xR1sZuYCcNDAHHzxJk8e8+URE/c4FATY:XL6lMOLp6WL5s9LCcKWH/SFW/z/xR1+v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cfedbb0b9d791b59f7356c6196c0200_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2472

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2828fcb12868359340e032a96b7317f1

    SHA1

    06fefa33e4e6f31e4bc340e92d6ca5a9486badd7

    SHA256

    d78ac455c20e9dcc7393ceb29ef8e790eccd6ef3a09a1293f461f9fc82bfcbb8

    SHA512

    2bce3abcbf8b4caed5f502584eb6e86da52afbca8b9f08ab0ea5d197716343ac1f5b1213a9dd14fd57063285a0bdcda1e5753bde1302feb0eba333f7d59384e7

    Download Submit