Overview

overview

3

Static

static

3

69368999f2...18.pdf

windows7-x64

1

69368999f2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 00:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    69368999f2c150c63d681179690e34ca_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    69368999f2c150c63d681179690e34ca

  • SHA1

    30867811c0af627ab343bfdf6d1387b2a50c5171

  • SHA256

    2418924ec5b77ba033706c1e8ef59ecdf65b885be39dc16714942be7abd97f80

  • SHA512

    c7351bb8deae1c516d9d600ab24715974e6fd874372e3e41817944c510e26e8868bec1b4c8d8ac62f4a6a3cdf7820056304c2c3b6a421d82ac0fe7a1add7f517

  • SSDEEP

    1536:0GFqedXI6lzh+/B/YhGQCScIceTt0yoSxUJa6gpVxJG:BFqeLh+tY8QCulzTUk6gby

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69368999f2c150c63d681179690e34ca_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1920

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4db8be26ee5e7438f46971ba0c29cce2

    SHA1

    917daacb520392f7db491fed934b59a808ee89f1

    SHA256

    66640704971ec4bc55bd1959132ccaeddc9a5f130265935564dffc20f6ac08aa

    SHA512

    2e9a4a3b5bd661f21963cec95ccdca0576c59a9b1be085e250cbdb4a89951cee8848b8e0dd59f04fb70c1cd0a6f1a09db76330938194d4760b0026cf7cd6afae

    Download Submit