Overview

overview

3

Static

static

3

6e2d4fdfbc...18.pdf

windows7-x64

1

6e2d4fdfbc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 10:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6e2d4fdfbc39d9490e1f22f570ea9eb4_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    6e2d4fdfbc39d9490e1f22f570ea9eb4

  • SHA1

    58e924fbaa42f5a430201e4b90cf1ef318f41b49

  • SHA256

    df5252c7c423f0e529100df6983e86acf6bdfa61c280c52e3de349a79251a38a

  • SHA512

    8cafe9712a0a6fb536aa40646d644db4730d6cb30dd2f37064974d4eac6ab59858452308e149ad6fc7a56c2b74ec0221c5820aef1cdf6d3972d0b3904afdd5a4

  • SSDEEP

    768:FgGzpDOr9KYTyKMoHVeP9QHRdUaA4IpAUhsomJR1AADgTjSp/8VdMjA+f:WGFyhwSA4IpbhlIFcHSpk3MjZf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6e2d4fdfbc39d9490e1f22f570ea9eb4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    46518af648e63bcc1ca0a9a02fb56590

    SHA1

    d6f0657fc7ef07b7eae4dd77e8c952a1d4353b89

    SHA256

    a3779d011614dd966b91b0fb57c3ff7c8d61695e2c7dc07de06ce325cc6d98e4

    SHA512

    d1661f82d8375cf06e0a3950eb791bfd59b80da4f214578edfd22bc205f0901a77428f14def44516a9debe6dc8d148c55ada83d8469af58bc4b3fa340c27a054

    Download Submit