Overview

overview

3

Static

static

3

63f212fb9b...18.pdf

windows7-x64

1

63f212fb9b...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 16:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    63f212fb9b82ae829d45e455c23af589_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    63f212fb9b82ae829d45e455c23af589

  • SHA1

    6a1e1908ce3d3577c4cf526d8d2d6bc67d3ac85b

  • SHA256

    b1d0633776d8a8ced5e8ba732a73dbcc233f836ec8f67b9648896b53ddf2b762

  • SHA512

    8ec62dacd9339e4ffd0d601b08f16c2b14e4fa6a80312c7d5ebfc0ae73065dbf93073bb4707a2da6d0f5ab33332622ebfce12239815e1022737e71c8754057f9

  • SSDEEP

    768:vgGzpDSOhrfkWPu4Ha4UXzx9EYxahvENbyFn6h5kQsQl/EKT9nlXejccJFIVTPI4:YGF2Oq99s0byZhQl/bT9n7cJFIVTPIJy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63f212fb9b82ae829d45e455c23af589_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2264

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6c579c699f269703dffbc54a6f9640df

    SHA1

    0fe05c8ecfc957822133299f838eee7d210590f1

    SHA256

    9e5a38761dcf6d922151fd79537c46266ba2dd6476b8c7b6b4e15b3ff498609e

    SHA512

    6d18e859ddacabf96ca1a5a4a34c34df40b5791f7036a6a9376ad4b287555322c8295556141360406d8b10ae4a935c73467b172552e12fd5f090a1ab20f800e0

    Download Submit