Overview

overview

3

Static

static

3

691605e2f5...18.pdf

windows7-x64

1

691605e2f5...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:05

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    691605e2f58348252f30779743c287c8_JaffaCakes118.pdf

  • Size

    372KB

  • MD5

    691605e2f58348252f30779743c287c8

  • SHA1

    3d05c50bbbef1b1207074022b4335bbbad891a80

  • SHA256

    62966145dab98df9987cda3434f4edd3be58d3edab6a37d739da996d508d853b

  • SHA512

    f2d0e48000b909c6b9a42dc8df27f4907ec8c1efe8a64a6352bfecc199f75d68201246f69e886b247f9ccf6b72f4208acb2ff54395b822d8c987b22998c4595b

  • SSDEEP

    6144:SMiBZc0z1HseZxg+Wx9F90bWukI/KZkQMcDGQwabo/n8u39IhAVurNpFCYc:SrdBMGOx9n0dkI/KiRABbGnCJvE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\691605e2f58348252f30779743c287c8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c0ee4475eb0881a3658435838fffa6cc

    SHA1

    c853c355cd39201c9ade33e09856919309ae5cd4

    SHA256

    b451c0acfd64390df218e17f698fc36815e6d001749ce97bad75c52846809234

    SHA512

    a63e80c17bdeb5c66e46e7909f3e00badfa9fddc5b7b06fda26ada0bcabec88566bef930a63d14cf8066ce9d7305e5efb947ce991188a4e46ba8508354747584

    Download Submit