Overview

overview

3

Static

static

3

2d06d5b3f9...18.pdf

windows7-x64

1

2d06d5b3f9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 03:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2d06d5b3f965675f0892125d8901e3ae_JaffaCakes118.pdf

  • Size

    365KB

  • MD5

    2d06d5b3f965675f0892125d8901e3ae

  • SHA1

    ccd8a523f590f6707246beb8ae73af6e8874ea2c

  • SHA256

    dd5416ccb6f67d7d532a7bb954ae0fc19dc1d1aee4d69004b61d4242748e589f

  • SHA512

    345ca21172dd8ae45815ccfac289a3df5f19d8e93109d10b5b09b71f63a59a82066d4120257c5db2b8b3bc99fdb8cac6f912fa09d63c21311ce0a587f1ebbc0d

  • SSDEEP

    6144:gVJR6G/WtzsTem6ogk2Y/5j8mBH1xFbqkJdPfc3WCVtZuphyyRIAym:GJIG/Uz+x6o95j3trxqkJdPfc3WCVt4N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2d06d5b3f965675f0892125d8901e3ae_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4ad358abb3f5579c365064549a4a1cec

    SHA1

    aa7145ef361a845dcbc828e6e0f53881f0304a18

    SHA256

    788d3ce9fe60b507741e66316ad6e5d222d72f3d34cc100cc45ad730f9bcb863

    SHA512

    e3cc13d1dd5b9ff7c4c62648a4f5284d4d213a6775674ca65878dfab93e9533968e9e0077dcdd9f0e076a648841d50f1b84492590920d3f290f97c6af132d2ad

    Download Submit