Overview

overview

3

Static

static

3

0c8e85b551...18.pdf

windows7-x64

1

0c8e85b551...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-03-2024 18:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0c8e85b551734c6eb0cfbf8927dcc757_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    0c8e85b551734c6eb0cfbf8927dcc757

  • SHA1

    2a168ebebc3cf6e77582149cf2694ba0714338a8

  • SHA256

    0eb088114ef8cd50e22199ba89afcbaf7c00465a5e1ebef737d3579d182a95f5

  • SHA512

    f2faf3f71c038be7b260565e1f0ad9433f503cca4e4c1bd17780a2421ecc7b5eaa195ed834e8a0da097e2120f4afdc10f5fd754c866bf24d28a2cee1f83d5d7e

  • SSDEEP

    1536:bEJu32TVDRopt/VZ1Y/xkggGlzMULJ/eDXdW233qscbq9cAplbWcpOm0skKd:r32JDRI/v1okg9pRV2XHjcJsamp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c8e85b551734c6eb0cfbf8927dcc757_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0d7f3dd6e8d2ed8157cbf961dc6b7fc3

    SHA1

    5a32dc6f3333a9717c671ff74be08fbacb0ff8fb

    SHA256

    64d12d7429f88d88831dad44bed61fddc1d471056402ddc01176e7318b8fc7e2

    SHA512

    9974e45c72b7e677ac3cb25bc1cb7e8b48bfbc6e74ed41fac4d69238d90679c32a5a5cbf47ced94346d94093223960407dcbf417816ad53259a7579578b43b31

    Download Submit