Overview

overview

3

Static

static

3

6bd5fdb2e3...18.pdf

windows7-x64

1

6bd5fdb2e3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 18:16

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6bd5fdb2e37ed202e2ec3c67bef4b5bf_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    6bd5fdb2e37ed202e2ec3c67bef4b5bf

  • SHA1

    ff0349c36df3fcbd317a6844d4788e0bac79190c

  • SHA256

    09e695107fc3c8b264b381a53455eadbff89487b3bc8f5ceb48b9aa2ed88964e

  • SHA512

    c3a63af303919075b4291ce83b6c960028c548020dea8d9a8932e5252d05f6c96c6adc561f2e939af4711e16ae897d2931d40eefc026293a2546030bcd92c5ce

  • SSDEEP

    768:fXuMZmwgCLWarKjPB8AHqolc6+hlxR590Ay1WDyJq:fXFZmGWSWpjqolclD5Ry18yJq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6bd5fdb2e37ed202e2ec3c67bef4b5bf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1956

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d5a1f3b5451bdd99e2b55bccefe6b109

    SHA1

    a84bc52c34f210228899608456ab91b0b7c8b4b4

    SHA256

    27a2406cf1479d6d4d3987e110135775fd8f2fca6a824cc1ae5922f31e351fbc

    SHA512

    932aadc9e83ecd510b3c9d6a0d79880e276a1390d0537ea02c8c17970fd5368b7c45f24506e696aa1040d904e587e88cc9e216f869a5c7db34739a95a93238bf

    Download Submit