Overview

overview

3

Static

static

3

61e48fdbcc...18.pdf

windows7-x64

1

61e48fdbcc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 03:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    61e48fdbcc83ae082917b5dd92f61f34_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    61e48fdbcc83ae082917b5dd92f61f34

  • SHA1

    79e83f20c9870bda4dad1af813afca777a6bafa6

  • SHA256

    b01bf2e63cc31066d9f00e7c81a605518672ab481a2ee7c43fa0f60be0e4b4c7

  • SHA512

    23a7447d3d0eb077745b60fbd048ab683b3e8e074ef440f9c26e9fe3fd987e0b8cf09786f85d995535431d32aa0df32c9185fc27f513d12836fc380fd7f1bcfd

  • SSDEEP

    768:9XuMZmwgCLWarfE5HpxBUTCr/wRjTZ4TYpJTDgEPkGRU9s1d5PoPQ25BgQ2:9XFZmGWS4jBUTCDwRjTZ40XhkGRU+1Pf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\61e48fdbcc83ae082917b5dd92f61f34_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f002d6eabad5542ce1185fe2fcaf1665

    SHA1

    6b127eb38eddbcb2d1408b6b40d8e4d20cb9447a

    SHA256

    2aab41c32c52397e0f1b2f50ba19bb17ae949b0a34a466991967e970cd334cef

    SHA512

    edc63064169694f97bc5da3c09b7622b787551b4efe84b2fc7e6aec1a3f1c3e6237535acb11a41be2de14ad05dccc8c815ae8a79820b11d175a3a4277c9ea51e

    Download Submit