Overview

overview

3

Static

static

3

ffff86b03a...18.pdf

windows7-x64

1

ffff86b03a...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 19:27

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffff86b03a31a4536de8cc168742636e_JaffaCakes118.pdf

  • Size

    97KB

  • MD5

    ffff86b03a31a4536de8cc168742636e

  • SHA1

    c0aa8998eafde3dd7d8f469f2c0371a054ca5b64

  • SHA256

    3e5eb994543679f3e0e16c46d0cb1e6c6136df7a01a02f4332c6ee2b80e91669

  • SHA512

    77d5aa99610ed99cafb7d8a362dfb3cd60b229f588093959d148df3f6d8ac3eb763ef72dd4d456e7bf0135ec815e55530bcb1d9638cf18f37740c37839d4dc62

  • SSDEEP

    3072:Ps8X03vDhws/q+XhWiQP7q2OOUbv4tnY4Y:Ps8krhwei/7bOOU0K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffff86b03a31a4536de8cc168742636e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2912

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bd237cdf60b43b83910a9151d8e01a5b

    SHA1

    4543ddd385a3a277bb5cb40ad990150852711c07

    SHA256

    f19ff28ec30693ef89ab2407e0e7d899db7bd0cdf59a1d3d9d07a9c91e1e60a4

    SHA512

    5340418b83a249e1f7ce3bb1f24fc10f0734880050b8938e96f73b5f4440d01ba8c468011e9238b981e3b4a99f8b088e1f3511446cadf9d2d036b199473b19f5

    Download Submit