Overview

overview

3

Static

static

3

ffff1f6f38...18.pdf

windows7-x64

1

ffff1f6f38...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 19:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffff1f6f386ea1dc8aca8acba9b1cc32_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    ffff1f6f386ea1dc8aca8acba9b1cc32

  • SHA1

    83ddee9a4db83bc5ed1aff098654b8d54d377b32

  • SHA256

    84c89e44d15c211f735497f46ab95438194ce5f41156d150f9b2da9dd231ff49

  • SHA512

    f9d04f205f9c6d87c56a5613a316ae5fd905c2545a995055e971bbb4329ca7110047974fc3d9c4b5642320e5f020e79695d209daa9bbe8c60c0d4077ee709215

  • SSDEEP

    1536:OhhDtJNRC7aEIj/e1wZxuQgvQv8G1IDOBz8yiNemXWOpOwrKWrVb6KXU84SbM5M:sxt/kTQe1wGQ6Qv90OB83NIwrmKXlbb3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffff1f6f386ea1dc8aca8acba9b1cc32_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    62dd5b18340c564248ad4c24421daf48

    SHA1

    48ab4755cce2ab64c856ca89fa8ff4d72ebf85b9

    SHA256

    fc918d582937bc12c82a0c1a352a53ca4a1f5bfcc7b2de7ab3fc587bb9a8c3d2

    SHA512

    ea67b86e29e9d1e8ea13c5b288cfa0a84fa00f642748097b84a466bac66c52c0ebfdf38ffa313643e98eeb648a4687266276803d0aa85cfe00467870d0198c83

    Download Submit