Overview

overview

3

Static

static

3

fbb33fe5af...18.pdf

windows7-x64

1

fbb33fe5af...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 02:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fbb33fe5afd82c69c94d528281446d5a_JaffaCakes118.pdf

  • Size

    102KB

  • MD5

    fbb33fe5afd82c69c94d528281446d5a

  • SHA1

    7d7b5ad11f3269dd1a44cc402f60f2a79d62d68e

  • SHA256

    258f81bd5a8d2899013a9d9beebcc31c3c15b413c66d03fd86ab4660e71efc19

  • SHA512

    026d6efb283c8a8007c3d3850d4a4fb3fcf8364cca60ee10f4aafae8e4e430bca67329460dabc8646f7af78086dc5499e9eb25aad037691682ea13b7d495a3b5

  • SSDEEP

    3072:PFp8cysnxY56JnPa/9biiw+mI2ZVyQS/rSf2/zv:PFpJZnZpgbicmI2DyRV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbb33fe5afd82c69c94d528281446d5a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    105bd50e1358b138d0a55d871f270831

    SHA1

    3c5b38c0e50236223820c46c87e4a88039f6e9c5

    SHA256

    8c2b36ff68560a8a5451d60df8ed676ed5a0e730e7cf6b9706d00fb1b5ded00d

    SHA512

    a5af96d9444fa3028adb7609c05edc41a8fccfc294677e24bcc369c256ecb640eecd6a6afef400179627c698e6f5ceb9b08758ca15e735b08059ea32f374e06b

    Download Submit