Overview

overview

3

Static

static

3

6898065a6f...18.pdf

windows7-x64

1

6898065a6f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6898065a6fcd37b05ab2faf5378d85dc_JaffaCakes118.pdf

  • Size

    184KB

  • MD5

    6898065a6fcd37b05ab2faf5378d85dc

  • SHA1

    78840932201257c238fd1c9c09089b25628c3bc0

  • SHA256

    eef3d568b1984d79477ceb61577d98ba3f0cdb83274f29ca3ff1dfd58bc49358

  • SHA512

    eb2058193fd17f53af9903fedd6ce14e6a1da936f4ef334c1e802087c819ee0741a83e79b74dc2d8ca9d12e0a98896744d515132a57c7fa65bb87fba9329ea6f

  • SSDEEP

    3072:32irbxzGAFYDMxud7fKg3dXVmbOn5uy6KjnyC/E0Vhwcfs/nmw53ClHSA:32MKlWQ7Sg3d4bODR/Eo9sUv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6898065a6fcd37b05ab2faf5378d85dc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d7339e839c9dd5516294f1a5e7d531d8

    SHA1

    c2ffa93028a84586326ec478ce07757441c4b7ff

    SHA256

    544f2c14b7d04e72281763eb5f9ded0274c566d77815b6e03b2341e634851e72

    SHA512

    e142a90eecd1a9481add374c7ad6ff03b8c4fcdf897c524f0950b0caf5278a3def2cf67f8dbf0b49298cc92a45ba8b7cd1a9aa0d320b84656856e661cbc6f6ce

    Download Submit