Overview

overview

3

Static

static

3

ffeb24cf1b...18.pdf

windows7-x64

1

ffeb24cf1b...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 18:40

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ffeb24cf1b6c53584adaa7b4462d2a96_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    ffeb24cf1b6c53584adaa7b4462d2a96

  • SHA1

    85f01f9c4bf6df466da5bb385caec8b2a9efc678

  • SHA256

    ae4fd835600a5663aa2827dcb3e1921ad631a7d15043553a642f8692e6172fee

  • SHA512

    21f5f7a4bd266323c47589b97d1339b8dec2b05efe6783a143b583cba0f2c2ead385cae1c5615e80647bd043b654632e681044e60fa03148e8339f40f0ee4762

  • SSDEEP

    1536:Cjs9TiGh8W1W1KIzSw4b/u3e1Se2xUUu/HWxn6mqJ8V7NYWQpOC+2drL3kWc0bCK:KCiYBaK80bEwSNxUpa6/etC+2/Dbdv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffeb24cf1b6c53584adaa7b4462d2a96_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    12ed81e2d320997fbefa5f7d2da29ea6

    SHA1

    b100a3cfc4a91c3eea7c894d6eab9aa3510dfdcd

    SHA256

    f255306609b9a7b6894a0118a4184a4fe1f7fab47482c0fe4c99448feb7fd572

    SHA512

    aabb8d605f7f2f54f58b1cdcf54181aba0e4b71937ef7b9a45a2ab268d41bd6b439a9b8730a46c397bd39d36fee22a22df9c3ddc6bcfdcd3607ee0fe06a4a50d

    Download Submit