Overview

overview

3

Static

static

3

6936b0b7bb...18.pdf

windows7-x64

1

6936b0b7bb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6936b0b7bbf24f90290d020d4acad86f_JaffaCakes118.pdf

  • Size

    186KB

  • MD5

    6936b0b7bbf24f90290d020d4acad86f

  • SHA1

    ec73092f2ffe12ac1f3999739536d6a2103efb48

  • SHA256

    f35cf20577c7eccabfa3f589dcd738a5e14bf32a73bfd4717f822bed4c55a42e

  • SHA512

    fee5f4c49a5e1eb346eb0e79e060783790905e8b4a0d5f4f58653e89092db39ce9dc8c055923f88e91937148cf166ac38973d64e1ed29411adb59d95d667661e

  • SSDEEP

    3072:r2irbxzGAFYDMxud7fKg3dXVmbOn5uG6KjnnQIS/OsUgUe5BGsFjnFv8S/:r2MKlWQ7Sg3d4bOvQIqODa5bFjl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6936b0b7bbf24f90290d020d4acad86f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:348

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    236e298ad74949000d073c6a995698bd

    SHA1

    3e942b230ff1d8fbd421380b9e6c0517cccd0029

    SHA256

    4128b6d41cee07791baf4e637a89ddd0729978eb2e1ceac38141d7df2c912d27

    SHA512

    08fb68967f0b704ff3039d631e13bf12e417c5e040b6231f66958a1bcb0b4f4a217e4e6a0102e0c7833d9de2ec7dcaf8a34057cd91e1f29a57bd127465a94f23

    Download Submit