Overview

overview

3

Static

static

3

658a84664e...18.pdf

windows7-x64

1

658a84664e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 01:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    658a84664e414a4fe57f3910ca7c918e_JaffaCakes118.pdf

  • Size

    187KB

  • MD5

    658a84664e414a4fe57f3910ca7c918e

  • SHA1

    8fbb08717a01068cb96cb7eb0b677590d8e5f199

  • SHA256

    a531d774256ea7351b677d95e6484663e335abfb4c6360787807526914bb8478

  • SHA512

    8d20c957c2cfbe1a06d067e85a0160f3f0b613e4327eefa71e56b4b18d3dcb1d4282e6e39a33b9951aeaa20261cc2dac92f3e4fbdb99be81a35292f0f5e22e72

  • SSDEEP

    3072:r2irbxzGAFYDMxud7fKg3dXVmbOn5uy6KjnyCBesU+Mtim9uUcSo:r2MKlWQ7Sg3d4bOzRBitZK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\658a84664e414a4fe57f3910ca7c918e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    57d9e202b20da265bc5f1a6dd6c9952a

    SHA1

    78e55e55ead89252d4363e9114ae4f76c3f1db99

    SHA256

    34663d12d04dd64f2bc376f3588871c36dd10223c0906da2b3dfd877333e998c

    SHA512

    a4bb223607aae4fd89e7da771d15ba91e3ad7c4c7b8254c227d4066203ef7571d57ec251db5aafcc43b23a8473f636b60615d980fcd3190057ec5761739dc18b

    Download Submit