Overview

overview

3

Static

static

3

8fc3aff487...18.pdf

windows7-x64

1

8fc3aff487...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    02-06-2024 23:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8fc3aff4878e617e50f9e58395d265df_JaffaCakes118.pdf

  • Size

    50KB

  • MD5

    8fc3aff4878e617e50f9e58395d265df

  • SHA1

    7148a0e7f383da4d4839e6c745781ba082b1136b

  • SHA256

    dac207a137ffe94629f45e631271c658f7303b8221f2b03ce0f664c133ecbf96

  • SHA512

    29731e8744be6c82e6a52a1ca49e5628acf96412226c5cf51c3dd88c78d8642ec3bf6944e2444a60c76445eef2b57a64901b120e2c578886d5628df7f10d71b0

  • SSDEEP

    768:lgGzpDapfm39jkM2a2Ot5uiDaAlOXpPu6GJnXDrbmJ/p3W6IXDEmYpeNmNdIWOs3:2GFWpHKY8bJ/bInIwm81WoUM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8fc3aff4878e617e50f9e58395d265df_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    23a49c1048c6a05a2317179d0b2e8758

    SHA1

    37269c15c5a05e93472b143a1d03848f649245cb

    SHA256

    a4b91a05155f1fd374ee455de8b3f52fcce24b10c34776fe6e72ea5b2b9da87d

    SHA512

    1b4a2d3b54c426268310568a6285a7f5beb850f10ed2a29b182741bfa6d9ada36f9b5f7acd58e8640359203995a800c85250fca404a1ef9d3df90e2249f8b740

    Download Submit