Overview

overview

6

Static

static

6

fc9bd5c006...18.pdf

windows7-x64

1

fc9bd5c006...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 11:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fc9bd5c00662bd61ae348ccba35dd9d3_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    fc9bd5c00662bd61ae348ccba35dd9d3

  • SHA1

    6dc48ed0c3482d03f6e47c72980263bd70863969

  • SHA256

    14ac3392756a0e72acb4c236bb089547d2d2ff1f365d72a70b350c23878c0314

  • SHA512

    2f7adaab3ddbe63a6057c3a68ebe03adcf61cd0b014c7844dc1bd1d2d80f16a7c1fbe1457d2476d7014b04ea7a179af04d9fce8bdbe47ab2f40288a4c7b7aff8

  • SSDEEP

    1536:udS9LBpuXRRwnKAWKvUvNh854gMBdpfIK0EhkAr0cbzff6jrl39QpYWspORGWja:rBpu3AWLSfWdpJ0yjffIrLQpzRRa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc9bd5c00662bd61ae348ccba35dd9d3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    373526d80249f37dee6a412ee06ca965

    SHA1

    1e427a68d4245daaa46886aa67cc0c1c6c2c6a18

    SHA256

    b1aa536fa3c772363f5ae424abc352b4ec1af85f2de570aa1c0a3c03ec60abe2

    SHA512

    47f96960947b40814eebca1df00780708c99e775c19881bf96ab790208da6e37d4f89eca05d3f3c99bd0cccf704010dc772dfd37730b40f1266c35f03f43510d

    Download Submit