Overview

overview

3

Static

static

3

6dc472d1ca...18.pdf

windows7-x64

1

6dc472d1ca...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 07:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6dc472d1ca51676bf7cb7cb9ca644350_JaffaCakes118.pdf

  • Size

    24KB

  • MD5

    6dc472d1ca51676bf7cb7cb9ca644350

  • SHA1

    4bbba22248db2f0c4585232286e6130924fcc803

  • SHA256

    8319bb654b0efcd44b40a0e3a6d68c52d51f61fbeddb0e71a8581066ea744ff1

  • SHA512

    f77dd91bcd3dec2bd5c280b9082f3b7a49a69b4cee531c82ef1b9edbe21e9953cc386bf2461c981fa6bebd256d6f651a04b3de3e84aaa6beb5c4d80efac8fa10

  • SSDEEP

    768:VzrWGz1cF6SBe6necSeDumxCkxOixGSCwCTHdvtrv1BvJBVoEvuquhOfGa+408Yf:4nFtZE0

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6dc472d1ca51676bf7cb7cb9ca644350_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e4c6175d6c5f23b88be3816627f73b0a

    SHA1

    e3f04621c8af2906801bad6a369c7d498adf5ee7

    SHA256

    dc376536871438d8898587efdc86e28cbcf46704e2b9f5c3f70e3434e6b85823

    SHA512

    9161ec455f96f4a793336c14b30ecbf8e45ac128f58f35e3f5e09f6600738c48a7fc367f9a9d422b23843d4374e4ed93d172b2862ad65fdd4d1ce00a0a731cc1

    Download Submit