Overview

overview

3

Static

static

3

68587b97e7...18.pdf

windows7-x64

1

68587b97e7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 19:24

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    68587b97e72124a48029367b3fe3fd10_JaffaCakes118.pdf

  • Size

    367KB

  • MD5

    68587b97e72124a48029367b3fe3fd10

  • SHA1

    4d853e57232d50261d3fc4e4b0b4d1467aedd14c

  • SHA256

    d8af443ec8c2c77fd0a30dd1dfaabe868110d8969029af1c2861852170fb0c5d

  • SHA512

    0884dfeda72c6529941de812eb801887e11927a503b0dfdc5a51b87f5a7632db3893e48bee326be7413d8221f5bb058c9d1f578e36842c37c4732136fb8de0c4

  • SSDEEP

    6144:N5cK/n85ZfnFdxYTCZI0Fdnfor0UCHjYDXTDZQNMicFNR0969iS17mVwq:Hl6hFHfJ3YDDDZQNMia+cLq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68587b97e72124a48029367b3fe3fd10_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3a2f45b93d2333b804184adae6187b3b

    SHA1

    d9bec97e836621ad21b751b4501ad843aebc0190

    SHA256

    4e1efab1812399eff782de60d46acc26c0b22229640593713291b18aefcca8e3

    SHA512

    4b883417150cef9b4bbbe69fdc580b1a67a54b3c90e410cf99df79bd27fd41d711467bcbf12c2625829c7a7828acddb0317982f006514ab1743f7f8d51d33fde

    Download Submit