Overview

overview

3

Static

static

3

6922aa53c7...18.pdf

windows7-x64

1

6922aa53c7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6922aa53c744c3fcdc8643327723ceb3_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    6922aa53c744c3fcdc8643327723ceb3

  • SHA1

    f0127c5ab260132d30c7076425bbebf4ec4cbbec

  • SHA256

    dc508b33d2066f339713f86a99ef10adecdb47f054210314da502d05fb910f53

  • SHA512

    b8198d6114138892abf112f670254006725c4a5d968f560ae944a5b0b5af376d225af56b0fdba4d530da16841ebc8940aba03274d793496871560b121b93f59f

  • SSDEEP

    768:xgGzpDYpxGFxunPHt9/qdGGaFfyyjG5UrJog1DB6PB609HA6c49a:CGFMpdyywUrv1l6pPdA6c49a

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6922aa53c744c3fcdc8643327723ceb3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1fb3aa7eb429ad86442360b71d7d34a0

    SHA1

    9b0213d103c99d2a98253acb4d7bfcb83afd0f15

    SHA256

    b56e91c8f0662c0ed4f17e1233bb6c38f78c023e2d2ccf73542f3b2114393ccd

    SHA512

    9341ddc10ba4621b0eff5815e6a4cc844a879ad80e1a45b5c496f10f980883238d25b5e17450f30d9ad929badefc568efab05ca7faa3ff1315df99a7b69e7384

    Download Submit