Overview

overview

3

Static

static

3

6ab32826ee...18.pdf

windows7-x64

1

6ab32826ee...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 10:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6ab32826ee85c79812eff743b3d74535_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    6ab32826ee85c79812eff743b3d74535

  • SHA1

    873bbcfc0c1c7bf1a455cb1c13e6ab13fa07f2da

  • SHA256

    d3c587a5468e4aa6fbe05a9701a94ed96d8ea71c26e05d384ad22c1199af31bc

  • SHA512

    b5ea6177aab2809aeded7d02a5f99a6767c5accf5f3c8ed84bc449bc1cc9c569eb962b6297e7f03dbbc9e476907b50893ca707950a5ff6ac9286c038c143809b

  • SSDEEP

    768:SgGzpDYc82afyjy7CeZ0pVDL6i87xYucrJ0AGRoSeFTW26:PGFkEf+iSx+d0AhS6S26

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6ab32826ee85c79812eff743b3d74535_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b8926eb2e67b64bd9c5cbefee302e2a3

    SHA1

    926e1daa5600150f48b83d203bb638d7337d7a52

    SHA256

    e410fb02daa27601055d8aeb9a61ed442171cf09caa3f2e19af041ac6be0443e

    SHA512

    6cf09be93d8cbdac3c05e04db4556c5b2e568c106b0dad5da9291d25313affc1b2b0c8498a4012e2e813ffe93468348d9ab8f692f3ffc69efd170a507e6f4367

    Download Submit