Overview

overview

3

Static

static

3

fb9972c2de...18.pdf

windows7-x64

1

fb9972c2de...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 01:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    fb9972c2de76f7e66deef65fcf5dfc9e_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    fb9972c2de76f7e66deef65fcf5dfc9e

  • SHA1

    79a42b8992ab2417568a9f23541ad6251dde52d8

  • SHA256

    b065d733c7975190f1f4ebb9f06fe5610f8066361dfed37c852dd7b506d3c446

  • SHA512

    2136dbbd517e2767d1962eea24bc13e0fa8138eb01622dc274b78e1ddf300b38fbea2928191c27c5cabbc07547745ded35baa42f23f198dc4f645861b787668e

  • SSDEEP

    1536:IQC5I+dtworkuM06kesJo/i7ZBOWypOlLdVKXJDWExUVlGcjy2:IHworkdses2KlBPlLeXJtCnr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb9972c2de76f7e66deef65fcf5dfc9e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
          Filesize

          3KB

          MD5

          00d060dfbb46d0593fd99095a7ab0141

          SHA1

          482cecb3f9eec01ade1f1e627b648f875b1bf5d7

          SHA256

          887df9b7ff34759df6785614d0f9c3c57e93c3bbd4a25dfb615aba14612242eb

          SHA512

          2b8c2a9d19c86477e56157ba0c649c1ec2464215363d93c8e352b1b9bda483dc9671389e2582ba0f5c1a14f1cbaec7ad6da9409d6637851495397514ad6c5192

          Download Submit