Overview

overview

3

Static

static

3

ffd63f7a4a...18.pdf

windows7-x64

1

ffd63f7a4a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 17:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffd63f7a4a6f95e0c46fcd74dead3ee2_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    ffd63f7a4a6f95e0c46fcd74dead3ee2

  • SHA1

    df30b1e4ff6dd53e7d1f79563a86d04ae318cab4

  • SHA256

    762e1aadb468750a19f45a9910a285f1869f08869d81cb92792d8e137c46405b

  • SHA512

    7e67f1e2531e9a904c44ef33fff4608cf3244497f3b401dc0c70e99f87a3093be78e946ec4d9a5ef9f491f0a1a7514ba5838a342f97ac390dfc670ca9e65aa58

  • SSDEEP

    1536:x8b2ExzYVdrmJpzWqaYPobS8J5TCpaYRlv+aYLT9G8rHO:Ujx+drmJVWSgbPCp3LFKT9G8q

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffd63f7a4a6f95e0c46fcd74dead3ee2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2816

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    fd193b8a29dfa69e6929a7fe5400a595

    SHA1

    ec41f86ed82e135e3c8d65580e98b4dc3f5f0351

    SHA256

    b1a5f99e7ba68bb018a7fa984ccddb69ffe56959548f9a90844b5bc37924421e

    SHA512

    fe17e53a28ac4507ed7f51aeddd5721452de44ab1d75a2c9edde63d46f8009957046f512673c86dd00f2870cd663abcc63ecdf528f31e1eaeb37ceace5b3dd1a

    Download Submit