Overview

overview

3

Static

static

3

68925decdb...18.pdf

windows7-x64

1

68925decdb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:45

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    68925decdb330384ac063f9a4f3afd39_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    68925decdb330384ac063f9a4f3afd39

  • SHA1

    01002583f1d56676b7768d443ec105d82a08c5e0

  • SHA256

    03c7bdd700de08fd29ed217bd91423f314fe88f7d8f23e9c8fd6e4a38600b439

  • SHA512

    52e70a824da3df0e656689d308235eecd5092a818a5338e0e44939bb442c73316b591c5bffa8ab94f478db691b56f4950ee2d0cb10245cf5b16d53d600a0667a

  • SSDEEP

    768:FXuMZmwgCLWar5vg8SkBFaxAjcv+zIx+/ikVuW4cdelC9YTIY:FXFZmGWSJF8AjTIYat5cd7YTIY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68925decdb330384ac063f9a4f3afd39_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9a7fa918168fa84ff4f255d2e91381a4

    SHA1

    9d997f4eb5852a3ab6761ce77128fd4448a8dbea

    SHA256

    d95e9ae21c73a73f4dced51940f930e3785f5040573d9100932aa72b87aadac8

    SHA512

    604d7dc4afff9e61343afff0decb7c373cbcb3e1a85664a7152871513fb545da700a629a5ce3419ef484daa60ef537627eb8da85a0a54faec9e66fb1355f9572

    Download Submit