Overview

overview

3

Static

static

3

6d214aea9d...18.pdf

windows7-x64

1

6d214aea9d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 03:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6d214aea9d3c9af97e2343e9306df4d3_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    6d214aea9d3c9af97e2343e9306df4d3

  • SHA1

    159839a542130c86b080f0d5ca7c94e8ec6e75c2

  • SHA256

    3e1140b8358016a4150ac6062ed6ca1a3d4a19d81595b89cee6b50f0fefaf632

  • SHA512

    1e1fe74fe2cce472c4643a1a3688616997d901436cb5401c898abaabbfa4a5ed9d930a711f0352a38992419c82a861366115936384f1c3e22a9595608090a056

  • SSDEEP

    768:/5qDb+/HC8ZZw/WVWUqiG1mRuADQ4aeFU2oJFbG10/3LZZ/nnKxTngcTE6HYIS98:/5qDCrOxUHG1mRuADQ4aeFU2oJFbG10u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6d214aea9d3c9af97e2343e9306df4d3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    06f2a3775b33f53341d90ce7e32d699f

    SHA1

    3c2ecc83cddb33ec3f01fe9ba913765145e6d53f

    SHA256

    fd809a3fecfd824cecfae1fa48abbdb1dfa0c6e1df07070cae1aeb62228ba745

    SHA512

    8e7e022dbf8a4e55896f5f185a55390054bb65611d0b4100f814a1a8432f5528910ebc8723dc1d12fabb6ed8a7527fc648cf9da2922310bf9cf7a71f883f4607

    Download Submit