Overview

overview

6

Static

static

6

20a8310dbf...18.pdf

windows7-x64

1

20a8310dbf...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    29-03-2024 11:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20a8310dbf749c1f97b4a1324bafa5e1_JaffaCakes118.pdf

  • Size

    56KB

  • MD5

    20a8310dbf749c1f97b4a1324bafa5e1

  • SHA1

    c2a53e18596a3b41e04d7d2d10299a2546ab0a33

  • SHA256

    537f848f0e0de99da23d7f4dc5115aca6ed781b582daf1e62a649751f85150ee

  • SHA512

    3b5c49c0217dc769677439c07295afa557950a030300e34a55dac28d1d6baae85b6bcfc1be538106f8beb3b683093c85a4500152d8ad8400e6e5ddc8d82db824

  • SSDEEP

    768:F1+hNi6iGILknbHLLvlfS78UIIqWQGD5qgs/ID1xxphZpAXcYeb7mi1aQt+l39V1:F8ziK3ZFWttPTpAXc/7miM/39VNiw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20a8310dbf749c1f97b4a1324bafa5e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    25e318cd80f0781252a773d9108dddac

    SHA1

    d9f0edcea581ddb2e2aa9571df83974c5e56333b

    SHA256

    0f5a6a75d432e30712e6ce9ecb85d5c92bfbf3cded208d9338ba3fb96532203c

    SHA512

    8dd922f01052ddb739e89155802e0d160b24b7a5562da0000276f7a2b249c0f1ce3b3cf39a001da51860a11b07951988f97ff4b2312745f6e83ba21b50a247d2

    Download Submit