Overview

overview

3

Static

static

3

6922be6623...18.pdf

windows7-x64

1

6922be6623...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6922be6623a44686a41268fa8c485c4f_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    6922be6623a44686a41268fa8c485c4f

  • SHA1

    8d1b7eb556fad0b581f3bb3f8815f59d0f94264f

  • SHA256

    4911fbff941afab2f0081b222183c9e3c188e4a9fcad8841da3547e3a6057906

  • SHA512

    b15a09d8641cbaf1d1f5eb417dbb60ef35438080225c2c88e27324bd84034704b299ddbebbc9763056ebd71fb2e70e38832f569489ab4ea15fd890f8dcde9f8b

  • SSDEEP

    768:1gGzpDlebbFJG9A/wq94lJIoPrmP1yXw0JYMHBdis7ttgx/ML8EEn1Zw0MHltFIS:mGFxebNormP0XwADHBU+2x/7n1Zw9HlJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6922be6623a44686a41268fa8c485c4f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    543721123d2714dd1a0b4f3e9d92b829

    SHA1

    90e464cfbdd57d3a431d8928e21da93eec5948f1

    SHA256

    fe2b34c7957bae32450cf2635fdfa4bdb6146eca8cc17a14e420ed889ff6ccfb

    SHA512

    62b4fceff3f75f9055159354f284cbebf6b528b35d7c1dd10ed2d39cbfcad61bb4fd68cfa8c1bb8cab8b961ea04667ff7d554c519c1329085c90ea990fb316a7

    Download Submit