Overview

overview

3

Static

static

3

ffb892ff94...18.pdf

windows7-x64

1

ffb892ff94...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 16:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffb892ff942df81da17ccd03ed4bc7a5_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    ffb892ff942df81da17ccd03ed4bc7a5

  • SHA1

    22a117a033e222a7c303d05a1c4402a23fa0ccc4

  • SHA256

    56c10499958a9ddfcc411b9b9ccd4b3635648546464e956b0380f616602f07e8

  • SHA512

    29da425a19b2bf8d8dadbd36a1a295d6a59667b485f2d0215a1beded75689b7ac6f50c07e89d6ec9265c44087b92e8b02e5b557d61f9f46686c7dbb5d50de2ac

  • SSDEEP

    1536:ej9Z2A1AiHwJoN8lkekb4Q4kflX4uDinSX6GgKb8cWsWUnLu9wi2qm4e4Nt91c0l:u9Z9IJoOlk74QZflouDQSh8zULLqm41/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffb892ff942df81da17ccd03ed4bc7a5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    87ad0c0b80d1ea2f812d8f74b7f8fef0

    SHA1

    3a8041d7dd9824446402443eae5c27e15cc29925

    SHA256

    f6eef0f72a493a960d57ad830ec121454e6c44ef697638a63fd48c20d5b29f16

    SHA512

    1de32d217ac2cea6026e6b205e33fc29709339cb0900ac9c9f63063b52c93deb1802a0e828654a10ee287521c46a8172341db3e8597a1f5f72f873e62ce12664

    Download Submit