Overview

overview

3

Static

static

3

6c8ae96bc5...18.pdf

windows7-x64

1

6c8ae96bc5...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 22:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6c8ae96bc5e80d2de2707eba683a07c2_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    6c8ae96bc5e80d2de2707eba683a07c2

  • SHA1

    3d9b3dc768325e742b4bc955b8290f061c21969c

  • SHA256

    2a718f9e0483f75028a502c911030df70ea79c166bf6eecdf913bbd676f1f585

  • SHA512

    3053e5d64d4ddb1e8c20639999cea5c4f5ff7cc4e5e2b0755827a4756f6f011203e69efb6137594da6dc37acc400d3d97bc6bd6304ac6bf733865db211a2ebf1

  • SSDEEP

    768:+gGzpDJpXMO93otc2L/xruHP3e7atLJu0fYbtcEgjsuQiQevOqcHkxluNpmN6DZQ:7GFtpXMHAu7atFVlpQevOqcHkxluNpm/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6c8ae96bc5e80d2de2707eba683a07c2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    296edde7dd5e0d9ba0659b94bede8e5a

    SHA1

    3e69d1fa124aa082f1cb8818bed11a65db8b57f5

    SHA256

    309535dbe5c6137cd50dfa3378e2fce915c0ff15d82012d9ffc9f69542087c48

    SHA512

    29efe0d74084f27757c2d21e7452d4ad195d6f5f04998535d023358fed63266589472b4f131c4f9bdaffe638a616d30be9bd377042d413a755b2b6e889242e23

    Download Submit