Overview

overview

3

Static

static

3

8c648e01f9...18.pdf

windows7-x64

1

8c648e01f9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 00:59

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    8c648e01f90539ab3db40bbe6b93fa56_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    8c648e01f90539ab3db40bbe6b93fa56

  • SHA1

    29dbb09bb0419678bc8718c0b50911414f7f440e

  • SHA256

    650c2d4edfa84886c46fb588d878d6b2498864a5a7574af4976710fc6a75d5fd

  • SHA512

    d6e76b701dc807bc57138d0c7dddf1fd8aeb4125a13fe062bdac77c452b28cd453a8cf6827598fea8cae6995bc6e3e0300b81d30c1c673bb1150963fb0d5405a

  • SSDEEP

    768:sgGzpD9ROcaFii729nwNY0IHDJstyEpk7CCMRYl15OyRUG7sniJsi8CEQHwcCUKT:pGFZ3i723fDJst7WCi8PQHrCUIxi0Lp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8c648e01f90539ab3db40bbe6b93fa56_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    27d6c3fbbb15139cd35d165332da0a14

    SHA1

    1f9a3f980799fc9e12ef2d7d40ac500fa246fbe8

    SHA256

    3e2027c8d3c6b1c43e2d67d21c27fd884fa69d0fbcabac209e5d65a4bf4d0b40

    SHA512

    6f6ac93f35916e3eea3f1bd4f035bab0cce9e4887f99b5438c15dc54571479e3d1689d05278135d3d54ff2de67ee752deabda61dcef0af1d25538734b6d635dc

    Download Submit