Overview

overview

3

Static

static

3

694f04e2de...18.pdf

windows7-x64

1

694f04e2de...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 01:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    694f04e2dec18ab21f29f2d3ee18c55b_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    694f04e2dec18ab21f29f2d3ee18c55b

  • SHA1

    12f9ab6c7e6eca9496bf21764548f943a92bbf3c

  • SHA256

    4db0d574c6f2564726c85cf1602a42e24d0cfa5d9b398d8c0b90948a67b3a4f6

  • SHA512

    e373747123233c955d99581a6a682829d8bd762886c2e324c3afe40c32ab10cf217da98e6da1cce44f1fbee33a789e095a68ef2770990a33f5a13d687b9ec863

  • SSDEEP

    768:sgGzpD7E3pKF8NTxSMhUsOtbMx3DD9z2wjlegtAZLonif00p9jzcgt8hog89o:pGFvU0tsxTeg+oif0+9jogOao

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\694f04e2dec18ab21f29f2d3ee18c55b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2364

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f6b0ab87086b07fdd8abb57739f1ac90

    SHA1

    c3ef4ed5560a2a5a6ad1bea7a164c66b999b6853

    SHA256

    7c301f5e47c31d135fc2d57c810abe356a368c1de8d09721cb236d0364d42afa

    SHA512

    3c9174c1e63dea5b4c1ec7955733664fe229458a1ea4ee066dac95276bb300b77cdd5738325f41ca8cf03d71991a150fe2be10946172fc6c8626776ad0e29cc8

    Download Submit