Overview

overview

3

Static

static

3

648a7bf061...18.pdf

windows7-x64

1

648a7bf061...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 19:47

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    648a7bf06104e6b7200ec4074b65897b_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    648a7bf06104e6b7200ec4074b65897b

  • SHA1

    3e8c58c52e43f825e6ea1ea11e472865b70e3a2c

  • SHA256

    8220419404bfacb9a24309c30b788956a8c4f74103fce81391d0f3daa14978aa

  • SHA512

    f8cc1ae5e5c7494f25fcac4709a101aa9ebc941393237a810ac5a5321d8a14cc746f90ae323a7985d9bd432f1d52b7f15ef76fd00882523a00b0ab82d49fb5f8

  • SSDEEP

    768:bgGzpDyBVksi89Z4bQLJ142yS+HnYybCyaJ36AemIXKVQISZ2vf5P+Jg1rvLrYFJ:kGFmZ3PZIf14vfF+J+v/8+ImS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\648a7bf06104e6b7200ec4074b65897b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1616

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    36bd2663c04ead351859395d6ff665ee

    SHA1

    f96865cb861433ce94875599da9bb36f328a1797

    SHA256

    a7a56153411815cbe0a287a9c6bae9fccb7c15e2f42465ec467b4a7fc56daf8a

    SHA512

    0346fc14923e8ef930ecaa5b026c9b0e749cfe02993552778ab8d6edceccd54cf4c15358de48d88211ce6142328259a24c3d132510a0a9450359765b817379f2

    Download Submit