Overview

overview

3

Static

static

3

63e58be5b9...18.pdf

windows7-x64

1

63e58be5b9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 16:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    63e58be5b97e1ee4244b50a73e2e6a1d_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    63e58be5b97e1ee4244b50a73e2e6a1d

  • SHA1

    566c5efff8f065d166f232b742bf0b2ca17dbf92

  • SHA256

    1f5048f57fa3a64f44e88a267a580d988003f861ce5b30be1a2f1c53dec26841

  • SHA512

    c11aac9dc008f119fa230e83f5428a266cf804c7540b9c7329d820a02f9d44110ab338ca0634b57ae566851d641ed72731f12b306882bb35f8538eb780b6a515

  • SSDEEP

    768:VXuMZmwgCLWarh7X2dvhNLlhQAvxl9KNe9eCmBbui:VXFZmGWSlXuhzhFvhThmBbP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63e58be5b97e1ee4244b50a73e2e6a1d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9af52e016118c414f98dc34588efc3ca

    SHA1

    bb815f1f990f81bbabf45899da7648afad492095

    SHA256

    1de7d8809aca6634bb8b8725890b51838235dfe7535d306669c2ad764febf84e

    SHA512

    a1cbb58069c594426dfbcbd924e2f418e09bc17cf409e71d8255ed9a697df37e4e95192e9ebb4b68c45dbe1894d49c8451bacca575032db73231e8fdcb902df2

    Download Submit