Overview

overview

3

Static

static

3

6935443e49...18.pdf

windows7-x64

1

6935443e49...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6935443e49f8d65196333a51315eecd6_JaffaCakes118.pdf

  • Size

    185KB

  • MD5

    6935443e49f8d65196333a51315eecd6

  • SHA1

    0ddd0ab6c3010f4e253a3332015bccea60e59ed0

  • SHA256

    c6b481c11181a173673052e3add58e48da5f07103cd5a02312cfa044c843f0c4

  • SHA512

    083b6fe947ef45085cfaf4c5fa295d6e743e1e5a50cbc842b26df77c7915b2d678ae48a1c0e4cf4b135c58a59c6d362554ccd00a714747f0e1aa8f447389da2c

  • SSDEEP

    3072:z2irbxzGAFYDMxud7fKg3dXVmbOn5uK6Kjni2cEbbGk7rRdvGqmw5vrZSn:z2MKlWQ7Sg3d4bO/i2zNrzA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6935443e49f8d65196333a51315eecd6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    71b61128b8d34b5eba6ba483aed23ce2

    SHA1

    e9b2659dca430ea4552f95db7e29acc33706449c

    SHA256

    a6dc65b83e85f226e60a09d6c4fa42c42c1a1579b500e467c84620e9c4f33c4d

    SHA512

    7d86f7e48666f056e3a6b2a28bcf03592263160858d1c5a39c94b67bde00fd51dd7b83dbc4b06d61c07a05ec7b8deb18a2123f57c79b82851a4fe99b06f57dd5

    Download Submit