Overview

overview

3

Static

static

3

65a1681d93...18.pdf

windows7-x64

1

65a1681d93...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 02:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65a1681d9343f713ade94abb59f9dd11_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    65a1681d9343f713ade94abb59f9dd11

  • SHA1

    02bddeef3350fd152f06a6df7d5cb5460908c4dd

  • SHA256

    74cd7542f24859711de16c58cfe3e2f704813397ddd45c44164e1481f1c855b6

  • SHA512

    8311843b1b5d75fe50f498ae2501d508dcbab458d39010ced39a9e23b98cefbd616f934874d4eb5d3dbdb5968708afb130f5f3a13ec8a625ebffb4590dab901e

  • SSDEEP

    768:oXuMZmwgCLWarC+fs//sMvpaRyak5bzoNn4XvnQhDhoooyw:oXFZmGWSEXsaGyNtWn4XvnQ5hoooyw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65a1681d9343f713ade94abb59f9dd11_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    dc1567f1c1a73b2becf4aaa430ab5ada

    SHA1

    758090f6a21ead1573357f1d9b756b36d2dffc8c

    SHA256

    3ffaf52fd98291ad31e561f0c1a3ab8383e6deb29bf7f280e17efabee9199bd5

    SHA512

    53d7ffca6957dc34651167d596400366e0a589770914c0ab360952c1a18c76b97144b239b2bb1dc3668d522b9271670a5b8dc9dbd9fd40663529f1d99a88adf3

    Download Submit