Overview

overview

3

Static

static

3

65d62d0b02...18.pdf

windows7-x64

1

65d62d0b02...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 03:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    65d62d0b02279d2aa0006161ce35cb30_JaffaCakes118.pdf

  • Size

    38KB

  • MD5

    65d62d0b02279d2aa0006161ce35cb30

  • SHA1

    1695c6c6f312a8d23b0b23a4618a15014d07f398

  • SHA256

    8988c7f3e5cc9aa88dc2ffdf88509a3afa3fe1b5ebd3dd897f60ddf8d520de85

  • SHA512

    c5c0b5f38aa3766042479d0c9711eb13c42d33f53fff14bca127e01c906e5fb2f2c82048ed5cf5430301829a90d9e10b5f694bd1eed1b7e26db371cdb9cf193e

  • SSDEEP

    768:OXuMZmwgCLWarAYY9J7iU06XK50N8jswl78BUeoJsyqdawZ8:OXFZmGWSkJ7106XKyyjsocdQqdawZ8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65d62d0b02279d2aa0006161ce35cb30_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c97e3f4e6d7351a1b59a3ff1470f0114

    SHA1

    2cb0eaa6ba624faca146a8ce36e2cbf922ceb575

    SHA256

    492ea934cfdf3cb3d5fce5c785e5614a0c3da1cb3ef4000097e51de4d4d46da1

    SHA512

    cc3bb095e1e3153011aea7b9c07314fce7396c2fdad3780019da9e49d34870e97cb0b165dc83d9adce570078ea9b6cb2e550f6a8091a2b49b2814b46da4dde58

    Download Submit