Overview

overview

3

Static

static

3

fcf92dba3e...18.pdf

windows7-x64

1

fcf92dba3e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-04-2024 14:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fcf92dba3e78a70d30e51546f8323178_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    fcf92dba3e78a70d30e51546f8323178

  • SHA1

    b0cd2ade0629aa02330e2cd4c33afc983a6d78b0

  • SHA256

    b87b2cdfa6898085de3330c3741447474b46b9ae9dbdfc4627599136ff809c08

  • SHA512

    37b10f8ed2b03acdfdeb29b0dc7d783ce00a5ce6536bfece51242c02dcd638bf922ff8955f6aee98034be000c0dfe5c5b1bb3fcbddb3b765dab372a28e8eb385

  • SSDEEP

    1536:Cn+vcOL/UGva62lWaT36iv87z+kq0u7pZWqYVWLwkgRRFdjL43ci8kYSWGpOmHZB:n0U/lIP36iICkq0utYg/gHjL4siTYDmb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fcf92dba3e78a70d30e51546f8323178_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2744

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    73bcd28b398a24fb55e71816cd5cfc16

    SHA1

    72b8afc077f7905627ae0712309649cae9089862

    SHA256

    b0260da069279190aa9300e658a60004a4661762917256279b96399c4a302027

    SHA512

    e43c62e998166dcbfacba805d7b196c8c91da0009f96185e1c0ad2cb660d59356df4466e8f32b9d4d84ae8d2451d94415bfac898d7c41b75c44a5168a629f5cd

    Download Submit