Overview

overview

3

Static

static

3

6949c65f96...18.pdf

windows7-x64

1

6949c65f96...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 01:28

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6949c65f96849cac6def63211158cc45_JaffaCakes118.pdf

  • Size

    58KB

  • MD5

    6949c65f96849cac6def63211158cc45

  • SHA1

    20b12fb79b3a047df7822fd62b5cb0f5b527581f

  • SHA256

    955a9cbc50ab38cc995903f2655205f122c9086a0d55e6f695b1e264db2e498d

  • SHA512

    ad56f0709a00d0061095cd735207fa971bdef0f934c3f7c9d34dcac96e65ece3c0b59b77117df01de0d67e668d357bbef266fbbe4b17de37ebdc1620c92bc52c

  • SSDEEP

    1536:JGFmWY2ctQxajIHd6gP3se3CsvgbWJl2CJa:cFmWY6MQd6gP73Vvgc2l

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6949c65f96849cac6def63211158cc45_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6e1c5ed0297ba331aac8144bc2bca345

    SHA1

    2ac606b15a91dee9acd6223ef0dfe159cb620bac

    SHA256

    ec0b642f1122dac51a4d7e8dce973ddf41444e5b2a033f8f976054035c6c1e34

    SHA512

    d905fa68e7c5024dd9ae191782357dae6a2bb3b614adeafd2750fdaf36c08bbb92ffb8d8593ddbde27b4b45c542ffac0313e440dee404e5bdd5b1fba51d56bcf

    Download Submit