Overview

overview

3

Static

static

3

0693a5b342...18.pdf

windows7-x64

1

0693a5b342...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 13:20

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0693a5b3429175a6b2af367b8536254a_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    0693a5b3429175a6b2af367b8536254a

  • SHA1

    5e556da5b21170dd75bfa3e61f7379bcbfa0cdce

  • SHA256

    fbb70ed7c55442c89d00b43e278038990aea585376b0b9757bb65174111b55e9

  • SHA512

    c835864914d93ba0495825899d11d7db6e9780b8ea323e0aa4d38ab9a9d03faa98940ea5ca61093c92a72dab04fef737a6f185a9705e74d8ba87ec21c8160d85

  • SSDEEP

    1536:1eX7nkDS+RBml8aPD+YH7h5V7bFdFN/kOsJ21WGpOKCWIUWIsndLcli0SsHVHyq:k9+Pu8aTHN5VPFN/C2qKCXdLclNSs1H7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0693a5b3429175a6b2af367b8536254a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    43b5d38c5f48e8fcedffabe6c4edae43

    SHA1

    2650d8b528b73fa7db3713ca34752709939ea079

    SHA256

    8add4ec30885bcf0edf28db44bf6320199214254581222ea210b74477a23dbbf

    SHA512

    0aa7a753b9e2fd012db51a853e6e70f2541e09aed77a54fa146eae0846cb203f8ba61f3f6010a787b45c5f42447a3fa388f82bae0c5a5003f0023cb05e9d3782

    Download Submit