Overview

overview

3

Static

static

3

006bcdaf7f...18.pdf

windows7-x64

1

006bcdaf7f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26-04-2024 08:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    006bcdaf7f35defbb52dc79055aff1a4_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    006bcdaf7f35defbb52dc79055aff1a4

  • SHA1

    e9b12f38d64e654112c6874a2693929f16d01c81

  • SHA256

    1cb025e489c12e7e4e71e75e9c1c0bbaab26ab53e9092652be03a1416feb5051

  • SHA512

    120fae2c5a9eab88af1dea77b29b84b9adc4a8d46bfe80cd7c5c810c7bb7f9d6d486794b6fe7967300c6fe5d2e9cfe32d3e6e021cfc2b2b449a4b1a0404126be

  • SSDEEP

    768:zJiQGzPXour39XUy9rDsvis3UGV3Dy1q1heXr1KDXA0gLd66JR5foaC:NJGzPXR3HnG3UGVzyA1h81KDXVgLdVJG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\006bcdaf7f35defbb52dc79055aff1a4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8c80798cb89988398c73d55141582424

    SHA1

    c07395a81f422067bf6ee3d46567053078d65086

    SHA256

    905e80afbe94b7d2303a77da8102905690520b944805508121ffd63854f289fd

    SHA512

    dd3806a4856b1c3d5918b48c151f3cece8d0ac688cd298685045b9b34c41a3ab1dabd6cc2ed77207affac343971691251d6476a99870346aedaabfc320e827f2

    Download Submit