Overview

overview

3

Static

static

3

890fc3a080...18.pdf

windows7-x64

1

890fc3a080...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 02:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    890fc3a0807e73976c6941d14fba1ac3_JaffaCakes118.pdf

  • Size

    58KB

  • MD5

    890fc3a0807e73976c6941d14fba1ac3

  • SHA1

    c24ef592442cbc350f6c119562890408c90c3540

  • SHA256

    f85ddb99d3175362578c545eeb7fd7eb7f52eeda8dc9ae106aeddcecf167087e

  • SHA512

    d9b8bad18b4dba4d7053e4e918991dbada2778795a2a90ba24f112d150d8f8ec37a43f547985c6255729b6057af3d4769292a1c9d2c45be7e9032b17b1f76dcf

  • SSDEEP

    1536:zQ3stD2yndxwnScqEVHJ1Rhhlt+LVpPyl9gHnHLXFZmGWSrfa:k2d3mXhlJ1cLSl9gHnHrysrfa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\890fc3a0807e73976c6941d14fba1ac3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bce146648d88b596e3751b8a43b1c4a6

    SHA1

    a406d8e18e5efb128c595bf4aaa95181ab649272

    SHA256

    7063310220d58cfb05225dd3beb7be32c2213f63c39fabc552a56b6da0280bcc

    SHA512

    3d82f12223843b00b94d92b3a09219e7e3fb2ca02cfba95b52d069b6996448d33a6f647cdbad4fe0f1a3d5c65a11131e747bef94a6db88d1b31aff64786dad3f

    Download Submit