Overview

overview

3

Static

static

3

ffcabcf7df...18.pdf

windows7-x64

1

ffcabcf7df...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 17:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffcabcf7df93aca61eb70043c53359f7_JaffaCakes118.pdf

  • Size

    95KB

  • MD5

    ffcabcf7df93aca61eb70043c53359f7

  • SHA1

    1258dec796997fc76a324f9e0511455838c23ceb

  • SHA256

    5f2f85a25bc388efb9ff22f74b3c074e69e17c73ae92c43daf462722c45cce82

  • SHA512

    39bff0f1dd3e54a5ac249f6515c81d41de90d702255d8911cc010200700eeb0476240e033ee365f7e5b303ed2fe82e3538eb4e8346f30354b65bb244bcb83f1c

  • SSDEEP

    1536:um8x1PMtrh46GwcOO/K6pMOaVxwl8lsbR3gm4l2xUkW6pOu26WBYRy4xIg3W5OTu:r8x1WOD/TKOgxwl8l4RhKdu2DYQ9gG5N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffcabcf7df93aca61eb70043c53359f7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d42a793b13c73e219b78548c41635a73

    SHA1

    f1270a32e6545541137ee7e4cdee8c665c25bbdb

    SHA256

    1124ee7000b828866877849e4212719ca74b220e4bdd91dc2276069ae97abf68

    SHA512

    f3c00f819043b90ae15e8a203ecb6c851ed8a4912192722a67a89cd7a19454d632799915df71f18b3b9eae702a97fc2a3581ccccf7ae87818e7ec7a8c1151002

    Download Submit