Overview

overview

3

Static

static

3

8bfd667cf4...18.pdf

windows7-x64

1

8bfd667cf4...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 22:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8bfd667cf4fa35a5f31fc80d2479a4e7_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    8bfd667cf4fa35a5f31fc80d2479a4e7

  • SHA1

    6a829ed9f54792a8c920f7fda38a16349d1e7628

  • SHA256

    a85e562d3feac302f812fc0c6c0ea11fce50e9ad543f2df9e8b94f0a446a9706

  • SHA512

    aac195f26a40b84837e9d22cb26a89990edecaf907c3f01f405b29ae6ca2d9c5e72c8467005655359dd37ee1158785e8514555f4c674fba22d37a289629fa833

  • SSDEEP

    768:SfFp3HccMSymL2z6NYz5RqUu89U/kYlw1NJUE4VWOreT9/ylRlKIwhv9fBRPXbPh:SPccMePm5M38ykYlw1NJUE4VWWeT9/yw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8bfd667cf4fa35a5f31fc80d2479a4e7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bb66677314b4985dee56f59ea58e4ad0

    SHA1

    83179d856961aaa694dbf4fa3fcdf792cb63fea1

    SHA256

    b6787d438329de4738f8a8e8cdbf23380368bbfab1ac1d4a2fe098324827f38d

    SHA512

    a61cd14439a05a6b3612fa687f4fb1a9ac172522c20a8a333d8bb8fbd1032e60be42b80b05e3ef7eb1a19090d21a333b001f46f378cf0506566ace2aa1cf628a

    Download Submit