Overview

overview

3

Static

static

3

639af90767...18.pdf

windows7-x64

1

639af90767...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 14:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    639af90767635003fe764047bc40c267_JaffaCakes118.pdf

  • Size

    53KB

  • MD5

    639af90767635003fe764047bc40c267

  • SHA1

    cba2dfd15d4efc675808685a5776c0814e407092

  • SHA256

    6616ef323e885f59f9bd01e06711e1ba53a9b16b27947bf0202762c9b5cf900f

  • SHA512

    475e14d1f049098fa185fde5430cc2f8fd0ab3f9dfb3adc690857eab5e4011718e952dc0bf9cdaa36a22737950e7f3209fda061faec9cd464fb0b163d0b815fc

  • SSDEEP

    1536:7GFNV1ij4NMDtYUNs+0qYRtZ+9BdujE5MA/y:aFNqLDtvpOv+/kEq3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\639af90767635003fe764047bc40c267_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3c13f0ff79a24dbf170e213035accf76

    SHA1

    b88e5df7c4a729a6be12c314a4b7f102874af8b9

    SHA256

    a5316203ea83b1b5e8e1cf8df3526decf2c3b30073de91fdf9ab22e4a343b565

    SHA512

    b5718322c78ec910bed8b71b3974f386eea6ddf599c0c86f08eeadd60d511264714bf840c3a0078cdcdc2fb5f8970f55f57a69eb62c8148f05c78f3de94b0e48

    Download Submit