Overview

overview

3

Static

static

3

65c8e1dffc...18.pdf

windows7-x64

1

65c8e1dffc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65c8e1dffcf5523f96083bfe72ec14a5_JaffaCakes118.pdf

  • Size

    185KB

  • MD5

    65c8e1dffcf5523f96083bfe72ec14a5

  • SHA1

    8601ed3ac64ef6c95702e5458e37ca92ef9038d7

  • SHA256

    c1f1713d79200b5525cf504bd6fa9224efa4ddd71f3c8b7a2cb5d7a53e586979

  • SHA512

    e33fff2ea3e4f2565cc9bfd96c7fc75f6d6dbe7db9e8a9e3b2f77d926c246a0a91f52ec5f1a21bc0c2c12300510ef00da2284e9fd50366285579615c421a17ba

  • SSDEEP

    3072:H2irbxzGAFYDMxud7fKg3dXVmbOn5u46KjnHguOHPMjadqSmw5fHgSE:H2MKlWQ7Sg3d4bOZX8Pvdfw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65c8e1dffcf5523f96083bfe72ec14a5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f5869d89b0652d70b60994b96bf24b88

    SHA1

    818bca77168965cd136bc2cfa3a54437dc75f568

    SHA256

    357b2d7b9026f37012cc967396746bc07cba8d50c377a3101281467736b5c8e5

    SHA512

    fd4c711a868d324e57986a2342eef41def4ed24557fe2f7fae3ea1fdfecaedc98fdb987a8013cad08e3d903d47ee9ad72c33f8ebbef83cf75103a71ab49c4fe4

    Download Submit