Overview

overview

3

Static

static

3

eaef606ea9...18.pdf

windows7-x64

1

eaef606ea9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-04-2024 11:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    eaef606ea909cedb81664eca662051a3_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    eaef606ea909cedb81664eca662051a3

  • SHA1

    f6e53bbbde4c81cf44cfc130d9cf783aa87a2c1f

  • SHA256

    5bb5b3541a0b2517d3b8df3ad7cd15a941431694f49ab648f29ffc6e2356ab27

  • SHA512

    9dd018589afd9220c6e48d0813d94c4980a8438c89591214521e03d252b4b2b2d9ce0639025e830be30333de43aacb8c926b9ed8f7f0ac907368c60cade388fe

  • SSDEEP

    1536:wM8msNgbD6FUc/PoOJ7x17tz3YDSSrzONG/g2QpKHvi77+XMWRKUU5uzPuXW8pOi:GgbD6FR/NJtUDSSPOw/LQpKH87+X5UAU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\eaef606ea909cedb81664eca662051a3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8a702d1e16354e969acb658b8d8932bd

    SHA1

    834acbfa683a0e9a68a2882b9c03f1c91536eab1

    SHA256

    efa85b0be7febd1edf9408151df23b3247b8851cad484a6c790e0b9569384bc5

    SHA512

    7d63efe4f4cf6266de405b94cf7c7dca31ed0c9bb692655f306cba3e1be86b78a3fb0a716f2473d686e730781c37cff081ef222553d5c4dc15ad8e9f44988215

    Download Submit