Overview

overview

3

Static

static

3

db6a10a88e...18.pdf

windows7-x64

1

db6a10a88e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05-04-2024 18:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    db6a10a88e550d5de1b818e9c4d766c5_JaffaCakes118.pdf

  • Size

    97KB

  • MD5

    db6a10a88e550d5de1b818e9c4d766c5

  • SHA1

    7685934813a09d19d3c866b838a1862df963db19

  • SHA256

    fb933702b3ca368e9d858fdeb80d15eacb7294f544f95ab15a065976798a2212

  • SHA512

    6259ace9e2b56e99ea729424a2184ce85dee8657bc26128fe077789f680b6d74067ec1c5f1d62e33e125eb532d05a287a54f5b7a203e8005f03a68fd9c10f742

  • SSDEEP

    1536:kkpxLmMUwb98ZUIBmNaBUQGkBb1ECWygwpDxOmqwN+PrCpjqvQPWAGJNyCfcdAwC:DIUhgDB7X91NOIcPe5qvQlEffcdAwE7b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\db6a10a88e550d5de1b818e9c4d766c5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ca0f5afb4549ecf8c0ac7546635e4d5f

    SHA1

    74964ae999c2365e1e4f91e8f9c60007f833f9c1

    SHA256

    1c7e870575b00fca34e99bfd65d545271adcda08d739a3cffde8ec9c6a7dbb93

    SHA512

    f89cb70d3fa564dbd863ee69537337d4ead605a68c565377db72e12d361126606874e906398968f680cde42deab2d184565ef45343d3cdd553de8437d5a665aa

    Download Submit