Overview

overview

3

Static

static

3

fc8ad30a98...18.pdf

windows7-x64

1

fc8ad30a98...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 10:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fc8ad30a98fc917d2aaef9c741f9362e_JaffaCakes118.pdf

  • Size

    101KB

  • MD5

    fc8ad30a98fc917d2aaef9c741f9362e

  • SHA1

    dbe4538a40978e7622a9f614b8cdf673ccc80ef0

  • SHA256

    53c0931d53dff3ccd25afc4581dd7c55adb64298def77d07b64c8e56a4c15dd9

  • SHA512

    2535958b2bee53480bcf6622b93bf2e2ab425cc5453b2f773f40d19b591277018acbb0b15a52030c16062ab025b2aee6fa9b0eb6a16b17372de187a145cbe97b

  • SSDEEP

    1536:YWWlCLx1qGxNsP//46M4HzBEUXOXSN1bJRE3dLBCQLQVm4XEWnioDOWQpOCbN8:0g1/xm/EqzMSN1ryrCQ8o4XuoDBCC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc8ad30a98fc917d2aaef9c741f9362e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e2ae3bfa053a4a1ec51dc52003daa62d

    SHA1

    0fbf5fe57b2391bf7870bea51f78c837c036b929

    SHA256

    a5101fec9b9778a65538ecd0bec4abd81a34eec78cd193fecdadf97f1b93fd7f

    SHA512

    8be18434308a7b19248987dc4609ef1ae71690eac5ab5f23cabb2fed2d80306a98433ba2d4e770f0d263836d57c974e91d3fc08690d79c3b4f5d82b8d25861da

    Download Submit