Overview

overview

3

Static

static

3

8948991212...18.pdf

windows7-x64

1

8948991212...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 03:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8948991212f4460ad8b65aed2a0cac40_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    8948991212f4460ad8b65aed2a0cac40

  • SHA1

    51a47263031c0fb3f002d2139c9af6201aa30c52

  • SHA256

    5e6c21cb6584b5883182ca48517582df077857bb8408e25e77dc55c4994b94bf

  • SHA512

    375c344f80ec5a677300895d501735ff92ef750617950308e02964d778b6699e906838c71af70a98882939fc6c0fe2361170d858b202240c65e79709d74c916d

  • SSDEEP

    768:8XuMZmwgCLWarebOqk7QKcQvqhoV6Tr1HbnG84tcyzgkFqsw:8XFZmGWSRqSP3qhNP17h0TgkFqsw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8948991212f4460ad8b65aed2a0cac40_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2900

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    d34ce34780d6ba0dbd67f593d25d008a

    SHA1

    8a323e3b7f5631c5a92686869a0abf6476c50908

    SHA256

    1cff896ac3bf9241d37805fc31cd68b58c8d7df1b7323844e00ae4775952e36a

    SHA512

    89781d4e08a95ace2cd31f657cff15b1babe3f714c8f69b53d475614cbc75e56a90f0fddbf82c4add0f8a7a173d9b3de230555961dd3285540b99a7ab4b8fa9c

    Download Submit