Overview

overview

3

Static

static

3

65515d9659...18.pdf

windows7-x64

1

65515d9659...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 00:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65515d9659149b5253685e4ac1c58405_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    65515d9659149b5253685e4ac1c58405

  • SHA1

    ab8534d0f0f1977e07bdb45cb1adfc2bb971ae83

  • SHA256

    cebef0160dc469fba922129a85a0be1bc4576286f256fa3e028a97c5a63d197b

  • SHA512

    adcdf0068054d9a299734a711342d2dfedf5ddaa9711ad6802c7dd95195e9b81e54ea454d26ac94beca08cb94dbddcddede026670fe75d4569544269e2302d0a

  • SSDEEP

    768:ugGzpDUp62v3BczD+VHMmIxNq+pBnL9qXE/+mu0xAF3GPalKr:LGFIphVs7tEXEZu0K5GylKr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65515d9659149b5253685e4ac1c58405_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    730d08561b0a37302ce909adce8be2e4

    SHA1

    8e7a7c22339078c9bdeb875ae6b8b9d8c4180cd0

    SHA256

    d34cf8a537c838f403d3d6d1d95b9c3e37443406f8589c924377d8c31178dd30

    SHA512

    52477efa5de7808ba7bcf5ff04bf467a7ee6f5d7451d97c699e212d770e150f13cea5ab8368f48732bb6c3c8fb4de90984c6dccd564432c6c7edfb41d7c481f6

    Download Submit