Overview

overview

3

Static

static

3

6951b7bf71...18.pdf

windows7-x64

1

6951b7bf71...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 01:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6951b7bf71b5c21f8ab5cb6b0daace5d_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    6951b7bf71b5c21f8ab5cb6b0daace5d

  • SHA1

    648ee32e08bd972e3593412dbb26f903a0f8e8d9

  • SHA256

    2c28cde5b7cf78d55a776803d4b36b05e582c5be3fd1d0643f336bfc283f0d17

  • SHA512

    2cc109b0d9e453fa054a2fa2c8fe7a4d5610ac54080f15ca87e92c9eadda6a3631d451d7ed6772962ebd6b3a93a4df374e649fcca8e7862e90a3b44d58a58f86

  • SSDEEP

    768:MgGzpDVpZFV5TTGfZY+h8ebFTpMy5UbDlSkxaJots8YoTuyD7Al7bvaU/eTXMVlS:JGFxpDV5vG3pMy54lfjt5qyHWb8gVl01

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6951b7bf71b5c21f8ab5cb6b0daace5d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f4f0f06b7e5d3461c0860f9df0bff34e

    SHA1

    d09da437d0c9c80db7dd155089f13268c133146a

    SHA256

    360fee4fb6267f7b2a72aad167747fa57c924e2f2b6721c4b5e1d8f7a5594273

    SHA512

    cac7590c8e89a9d3b0b6a31ba42573341c58099804ad8b66dc033f26e5d5cbeb388c3c3621dda39bc4c5ed9ac7dc359d8c0cec1bec3cde52252c4e86725b5583

    Download Submit