Overview

overview

3

Static

static

3

6e97fc094b...18.pdf

windows7-x64

1

6e97fc094b...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 12:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6e97fc094b9dccadc5a8da2eb0b97015_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    6e97fc094b9dccadc5a8da2eb0b97015

  • SHA1

    a3296ced73d67f6cdf92f91b9383f8070d2494e9

  • SHA256

    2e4d3a6e97825dada4b7cf189225514bed3ece11b5b2b66c36718556ec0bb90c

  • SHA512

    a7b983b9faeabf1c021e0ceef726a22c5a42b39592c88344aa30fb2106773be7cb7a8b724c04bf8d795b0397da2105ce0f5834e8df4b7575fcc05065c349d4f7

  • SSDEEP

    768:iXuMZmwgCLWarn0pVG5gvkhpQSE+1VZEhOEq3L:iXFZmGWS0/i2k4IVwdq3L

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6e97fc094b9dccadc5a8da2eb0b97015_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    f8dfc92ba349b4e753b5c2353ac8b73d

    SHA1

    6bedab86a59dedaf3ee0570ae3859b33077ed0fb

    SHA256

    c6ceca165a0e6d1b9cd1484d8b8075dc3eaa77b69a9007d90300e15ffd2c239d

    SHA512

    a3597b85bc7f13120da6e75668d9715e51f21a467847a6967ec47247e27602ca28b885b9b14c4cba9161c066313742e6f4cab813f0f66ee7678894d5a10d37df

    Download Submit