Overview

overview

3

Static

static

3

ffb6858640...18.pdf

windows7-x64

1

ffb6858640...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 16:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffb68586402187adb5f663fafad0b17e_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    ffb68586402187adb5f663fafad0b17e

  • SHA1

    0415c7fc7792a072ecead2df5daf7f8a6f5d71b9

  • SHA256

    dd3ffc2f023e0b5338beb47a9a1e62ab57c3a3906922b8be6a64a8a04275b356

  • SHA512

    a9b0a3a0c6dcd989b75c4d87cfed39f310e1c6d671db530fc6e3011ee13ee07aadb4bcd68ae42b2a7b0dea3ce9b6cf47ba6cd884ab7ff2d60d53c88708c760cc

  • SSDEEP

    1536:AbFx+5yjy+aFISKIcN53yK2jwjspKAfqrxslGgIzX7/L0DEWypOlWWxclzIKnR8c:Ox/y+Ys3y5wfAwIXQj0BlDUUKW7+h

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffb68586402187adb5f663fafad0b17e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    69aba09c9b97a74bcaa0e92a930b058f

    SHA1

    21b1b1da4513dfaab3be7a1e0b649ff8b8745b8f

    SHA256

    6d020abc0099243154df281c950d09e1e5238ccbaefa51e7a4711db674af22f1

    SHA512

    0755d93eb3a8037f631ea554c6b92a53b3d6bacf5fcf57b602cf40ef7b3416a54802c613f11717465fd97f9706aa545c4c3cc372a946c7c75e2a41e45168e2e3

    Download Submit