Overview

overview

3

Static

static

3

68f1026b35...18.pdf

windows7-x64

1

68f1026b35...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 23:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    68f1026b350b828a62e74010b7f5aecb_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    68f1026b350b828a62e74010b7f5aecb

  • SHA1

    32bb85fe4bd7e2bb03acc3a03404b97c8d9a3f8f

  • SHA256

    331a9dbb1a15ae37b2516c73c8bddd32d12c4d8fefb272faab53f41ec377cf21

  • SHA512

    19a3d8f246550f2dc82900b76513019b21e459f2f6dc758970e57ac92f9e4a1f7047c1498e67bd05f1c39396e1b3cb3a20e4e04c8d0b1700243309c4737e5e1b

  • SSDEEP

    1536:lJGzPXR3DtqP/bNW+A0iBluwS1A1RrgXPc1mbpgfO4VRmulr6GC:TIh3DtHhs+HrOPqmNgfrfmI4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68f1026b350b828a62e74010b7f5aecb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b102330c86c7a88e125dfedb78fae9d0

    SHA1

    3fc44ac90af3bd23697669f0d591cd6495c29679

    SHA256

    911fd1381a4135495817da3c3823a412d6b2b6828313296ff59e4d0bba520eda

    SHA512

    92dc0abe5be81bcdd1028bd3b5358137a162445348c36078595d39c19cc75db479691eea5695da52ca5168118c1ee3b3af67c6c52f45af049af7d0989d13a5e2

    Download Submit