Overview

overview

3

Static

static

3

63d1e17966...18.pdf

windows7-x64

1

63d1e17966...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 15:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    63d1e17966b30b4772a276d24aa52ce4_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    63d1e17966b30b4772a276d24aa52ce4

  • SHA1

    7e4028df1988b36abae6cfd99c7a5f16994b9d0b

  • SHA256

    88d744f2c7208cfdf7157a6023cfb1032ca615cb4f3ec7a6d5a5de5b02881c40

  • SHA512

    acecc3a6cf278de1287e94cb123878435208d9e597caa17eb9897a84887e8158d9d83645591dc104181811e6eaa7683445970a83d3c02a4c44b18b9c94108f88

  • SSDEEP

    768:ZgGzpDfqAvoTgwODhv5OBer0GdWhcu6ntO3dDJWM9wwMw:aGFrq0oTgjhvEBeoUWhFEO3dDJWM9ww3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63d1e17966b30b4772a276d24aa52ce4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1460

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    139eaec38cc4a9c91ca633277d28ff9d

    SHA1

    db8c025f4304db467d07050a75d681909f491bc1

    SHA256

    0ecceacda4f0c2e34e8c0cf302a3d391ed66bef9d76f6f2e3cf1a18ac7c8486a

    SHA512

    2d06acebc9c0162056ff6214cd907fdc4fa231748982366556e955026d6495a6e9177e82b242614d436b073c5c1e516a5b9ee61cf05713de9ee227e6d85fd9bd

    Download Submit