Overview

overview

3

Static

static

3

ffbfe99c3f...18.pdf

windows7-x64

1

ffbfe99c3f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 16:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffbfe99c3f224751f018d7d22da35f3d_JaffaCakes118.pdf

  • Size

    102KB

  • MD5

    ffbfe99c3f224751f018d7d22da35f3d

  • SHA1

    7994c058aa269787f58f538bc45ba8d5d00af26b

  • SHA256

    e26530bafa3f247b2c703bd2ea33af893ad096c8a6b7717a551eedc31f87fd5e

  • SHA512

    2b80df7dff5422a453f4b30796c2f964c148920d0d0abb9e77dd42d8da7bc3ac2049771223aeb3e8aa4a464b749b16f93c988b3b2bd7698c42dfdba1c48c1c71

  • SSDEEP

    1536:ykkN6Gb3zZhCuyBVgX9eiXNHObajStZ6iZiDJdmL+cO9WGpOKCWCCoNuVmw4a0zv:nknb31EPw9XdHOejuZLZSmLvKkY4xT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffbfe99c3f224751f018d7d22da35f3d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1beab440fedc43ee687428e0686fe227

    SHA1

    4484c73b2f55b3fd0e6aef01486773a8404cb4f9

    SHA256

    7a1f57b128fd15e3bb7ee7f0ee37d4b65cced667b557eeb31e97016540875770

    SHA512

    12832c9bb84e3e9e0a5049c1731d98645e877ad7a149664764858ec460bb05dd19b9c430c36f554efa2b2aba5db888ac3e336f5984db22ff3a51cb925a4b25cf

    Download Submit