Overview

overview

3

Static

static

3

63ab4c5283...18.pdf

windows7-x64

1

63ab4c5283...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 14:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    63ab4c5283603ad4fdc0b34e97bd637e_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    63ab4c5283603ad4fdc0b34e97bd637e

  • SHA1

    e0d230e871b4959f20719c96f6b563365a0f88bc

  • SHA256

    349b9b284c898b0a316aadc1b59bc3b6f5ab3c934bfadedbe8b02e234097d412

  • SHA512

    c4d31ce85d515c7b1537e3b582bac47cc588c17c98ea039f4cc8f8755e46785039af6109332b4a42e1413880ba42ae4afab2ebbae88c04942e206ae053ebfe23

  • SSDEEP

    768:ggGzpDCRNaJII4LuyzU9exE1qdX5BYueRBNSVuYN5G0LSRMoH4cW:tGFORtZX5uhEVuaY0XoH4cW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63ab4c5283603ad4fdc0b34e97bd637e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    70686645dfe09cf95eb705eeebd8cd01

    SHA1

    b3f2416ad40476caf56a3c6a77b2ae19577668c6

    SHA256

    1db9f8a0c7fcd756d265155d516b43206b25338e2c056b164179888c86cdf8b2

    SHA512

    c0f591e5a1e5a4c0cf63f6454f5330b4ce2ad6c90029f64169d24116753d0bd6518c89cc286f7f9df129dfc5b4067655659bc06b796cbe9970c86a8574b547fa

    Download Submit