Overview

overview

3

Static

static

3

60e7996706...18.pdf

windows7-x64

1

60e7996706...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 19:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    60e7996706013d6b2ec17aa2043dc481_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    60e7996706013d6b2ec17aa2043dc481

  • SHA1

    2f9f61009c6c6f5fcd2e8b48460d3dfa7cc25dd5

  • SHA256

    0e751a9a56d56fd0c66849d7f09f1bf27e30f0ea83989e554cc4c935a0a51cf2

  • SHA512

    a21a09d914e97fc414a562bea1b090e3653edd929271806962c70fe16aa820f849d7dc158c0677df915beb033db906519d85fb552412bfd06dcb8f143ebd0d2a

  • SSDEEP

    768:+GY9EX9fMb3X+uXE/hp2O1taVEVyiN1bPiVQGJwmk+YOE7W4nE5dXuMZmwgCLWar:LYWX9fMb3uyE/T2O1tsEVyiN1bPiVQG1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\60e7996706013d6b2ec17aa2043dc481_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8a22d0e614d0085feb42ec07c0b062d5

    SHA1

    8f3cf0f676f3913ba1c9e5f43b5ee26e49407f3a

    SHA256

    89928c250e6ebdae618c07cd687cd94047ebcab964df0659c7805bb5945b4859

    SHA512

    bfd0872416f54df71728c829db7895e07a02e8f8709b784f2a6f13525049528a78e350d5e804af8056396625d0114e836f1c8ee88aeca29669e336aa973d3a0a

    Download Submit