Overview

overview

3

Static

static

3

30f83691a3...18.pdf

windows7-x64

1

30f83691a3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 20:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    30f83691a3bf59fa61f6fd459ede3c68_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    30f83691a3bf59fa61f6fd459ede3c68

  • SHA1

    42f510d567e5861c000dc8a5ad22af3d989c56e2

  • SHA256

    159ce7bd0defc0a6e58a23710021d87640b9f67e05a92c5bce1f3c2be3b32b48

  • SHA512

    0cc6d6db1a6b74c79cb91a47931db7d16dbe104cb63bdc872960d75958fd4fd1c903c20904e7c52a831d86e4dc2398b0761060cb0d9432aafeb7578ae723a1ad

  • SSDEEP

    1536:slMNKDDpNylcwxf/Um3/4j64ALI/yjhi0eBxu3zROMVkllw1/JeEpVZPFKYyud1A:dgDalcwxnU2/ObmCsMnvwFviHMB/DtFm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\30f83691a3bf59fa61f6fd459ede3c68_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    eb614f792102cca0c8588bc1f62c3a16

    SHA1

    8ce014a1f7fbbb8ba3c943a942171014dd65a2ed

    SHA256

    7072308a02f1ba58c6916a24f9ab41e656e8b60a9435ddea22285cd5bce6358a

    SHA512

    5e6e11554e81120ef93bd907302f770322c26b9d54a306910cc0556cff0159bf14e55efe3e9ac36f6fe858fa4cbc5517df085becf504cfd0bfd91958a0c9f97c

    Download Submit