Overview

overview

3

Static

static

3

689e7177a3...18.pdf

windows7-x64

1

689e7177a3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 21:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    689e7177a306bca6bff4f60e1aeb034e_JaffaCakes118.pdf

  • Size

    357KB

  • MD5

    689e7177a306bca6bff4f60e1aeb034e

  • SHA1

    d079436a53be546ffbadc37625f18c1c8a793221

  • SHA256

    12350ca03aa8a0d7964e456a1e720452d6cd6d5c2a8aa3beb900e63dae438ae9

  • SHA512

    f08cc5a30f89a6b2a3f52e40f9cd2fdf9d9241c4d77cb6cb06460684494a0b3a23511c644ef255e6d6b09794344a5cb99bb052ea031220a165a5a74f654e79ee

  • SSDEEP

    6144:RS3/h99devhbCPLZ6I6uHbFEP7YpuHUcGKmJ/y9WWe0DVVnmJy:RST9dahGLZh6uHxEP7mmURltgpF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\689e7177a306bca6bff4f60e1aeb034e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b6bd5bdf221bb4ed3a50ea4943e77a07

    SHA1

    c2d0aae6d226aec46cd44eb64b8c0efd53feda6c

    SHA256

    386fd3796323cf0774c0cde005042630ddddc8c7e60b0ea14f9c7a2920c9a0f5

    SHA512

    cb2e5ed66053c80d330dbe44fa3a3add50e920eaa33a726c44d453dce875cbb7d6c121b8b9f670f22d1bd353b664729618f1c2a9c23de6bbc88b2fb23670dc9e

    Download Submit