Overview

overview

3

Static

static

3

69e487c8af...18.pdf

windows7-x64

1

69e487c8af...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 05:32

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    69e487c8afaf8083657152d7ac4e7dc9_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    69e487c8afaf8083657152d7ac4e7dc9

  • SHA1

    3f8d7459df83766689d9c36a4aac63fbe1713c7f

  • SHA256

    fe756c6e505fd5732675eace4b1d339f2cd4de3fb867252003279869aca9000e

  • SHA512

    25cc05ffcfe58a8a7f4fb58aad992f703cbb6db4bdf8e3c443c6d18924e0b359d15781991b71a593d7a1b42dd9a1b40de7bf902c8f88b827e04cce677bc395ff

  • SSDEEP

    768:jgGzpDvpWuAJdeMGnxEMkr05xKSoFcL6SxFooO0IWMYirD452cmK6MZC0A6Ww0+1:cGF7pWMzKMLacoKlq8sXiaqj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69e487c8afaf8083657152d7ac4e7dc9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c2a26097d1454adf19f5210d2d5078cb

    SHA1

    fd2dcdd5e83ba1079531ecbae7f0c9b6271fe4b6

    SHA256

    e8a2785a1540707689b6f3712d776db263830355c28be490550b0926278b6f74

    SHA512

    0ffe29833743a172a9413dc969fd28fd512061c238c3c1fb4960201f8af325bb18b21771fbf3ec5e9a1c608228afde591383f70db3f768e878e9849a8a3e8c51

    Download Submit