Overview

overview

3

Static

static

3

960e8676c2...18.pdf

windows7-x64

1

960e8676c2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-06-2024 19:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    960e8676c2150bbaa6fa9ac9ab8c7cd3_JaffaCakes118.pdf

  • Size

    184KB

  • MD5

    960e8676c2150bbaa6fa9ac9ab8c7cd3

  • SHA1

    6f0a8443a236f8704c8d1c2c674a76f62c650d08

  • SHA256

    4cb30ae50e8f9cc9da87940fa3fa1938c554d26ec8b437cc709a84338f75fc7d

  • SHA512

    eef632c20d8ac4d28253c2ee99c5faf302e70b4b65b0496fae2a63b342118d0f996e8a19f572e79584005fd0107ae4a6972422906f60aceb2e337a42bad96bdd

  • SSDEEP

    3072:52irbxzGAFYDMxud7fKg3dXVmbOn5uI6KjnnQI1d2REJYKbv9lLVEo43SJ:52MKlWQ7Sg3d4bOpQ8WC77z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\960e8676c2150bbaa6fa9ac9ab8c7cd3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    83d38dd0b653361011549b7983ede105

    SHA1

    a0d1d180d55d3861f855ee504931feb1c994b3f7

    SHA256

    c3e14eb2d8ae28376355a8a3a3474912da519a673375ec500c71dbe0e401613d

    SHA512

    e439e634fe0e224b6109bf67b5dafe4cd4c2dbba7dcfceed0eaa7aea0a352c4dc4094597d055004f9529e830f6afd75440a23a62975d4c2f754670d69e378461

    Download Submit