Overview

overview

3

Static

static

3

6587ffc46d...18.pdf

windows7-x64

1

6587ffc46d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 01:31

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6587ffc46ddb6cde9fe50034dba407a1_JaffaCakes118.pdf

  • Size

    54KB

  • MD5

    6587ffc46ddb6cde9fe50034dba407a1

  • SHA1

    411a475b78fc96d81fd943771a33f92b9036b44c

  • SHA256

    4e104dffc0d3bee2be20f49ab5d569dc82768a43c2f26441c25980a458741761

  • SHA512

    b603ca34e485f314016867896ff6e68d2b17aaa679f01175500d6da37e9a3f2be54e8d829fa628b82eba6786a64cedc485627aaf655fe4cd1bc5b9801bf2b71f

  • SSDEEP

    1536:7GFFp0gydmqzai+iQW4543PJnPvqMLHjtocA:aFFp0SiF46/BP9jtU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6587ffc46ddb6cde9fe50034dba407a1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9e77a31e70ee2934adad8f454417790c

    SHA1

    904e5358664c7350dff992f8c9266945b0c51bb8

    SHA256

    15d6a7622caade6f9a987761368d05710aee522f1a701e43060b9d85d1cd24e7

    SHA512

    c7f27bdc25c4375f5cac5a3b3618e650e2e19b130658e97fbfc440fb3569231d247af8551db5c6d05a92d9db12c4f1e0cb32457222da9c6303652333b9664e5a

    Download Submit