Overview

overview

3

Static

static

3

dc89270eb2...18.pdf

windows7-x64

1

dc89270eb2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 05:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    dc89270eb288de6a95330fa31d5b05ec_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    dc89270eb288de6a95330fa31d5b05ec

  • SHA1

    c20e3ec74bf181df8af66006e871c29c1f25f6c9

  • SHA256

    396ac9dfd35b9d8eac73994173c2b996529ae0ce759cad152e18c5612c44ef82

  • SHA512

    153df6eaca54b63df6babbbf8f4fb57924dacc8c09eb1a9deb9c3d6646f46f577c600ef26e4803763adbddabc4b05aa23578d53dd81a22b4af598009b31e6cc6

  • SSDEEP

    1536:q/hD4Lfz7dM6ipTZbBT4yNLR1zQWGk9xWmo4Ap41TI4QWQpOCCeC8olW0:+87dcpTZhd915va4Af4/CCT8+5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\dc89270eb288de6a95330fa31d5b05ec_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b567cab61259d593ba60bb179c7699bb

    SHA1

    6ae305733641077c6977840737403e52bd4cf304

    SHA256

    689758b5247b9f6f12d095bb00e2286d8d063a513093ca6fccee1082821493b2

    SHA512

    22fed94cdf62ecbe7a39ef3b04d8df7faf6b2f6a7f7d752535db8ac6ede2f4f571c674857fe69ce172578b87c0de5b24e89d984bb971f0b84957046e69d61993

    Download Submit