Overview

overview

3

Static

static

3

a6dd305d25...18.pdf

windows7-x64

1

a6dd305d25...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 22:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a6dd305d25bbdeaa005100edb8a5fd38_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    a6dd305d25bbdeaa005100edb8a5fd38

  • SHA1

    0aefce488ec859c18bc8eb9cb2fb50bdc79d9e96

  • SHA256

    932da18c75427b8e108fa91c692b0800faa71d174d2bb97cae27a54e7285fca8

  • SHA512

    4c4f7e86f97b07a939031c18e70c044e492ad029d380927e61003427e5c93b9f445898990c84e41a121ebdc440ab58b4ab463c037e6298adb680c9beb7a95348

  • SSDEEP

    768:oHgGzpDcpOQS33uCun8eX5bIrytdUT8dJXjK9AEfZsABBexxkjssMR6d:XGF4puTtAEfmABBebkIsMgd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6dd305d25bbdeaa005100edb8a5fd38_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2884

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    595d7760a7a2a7476e1584e5ba5a3267

    SHA1

    b510da9e5a17ffebc45642cfd4653e3e8746c313

    SHA256

    0e898a34641ec235d0e9fb197beafa99375a735e8047390f52d1d4119ecf8f75

    SHA512

    fb32c0e68ac2cb7cced81e2dc87e5e8445c28b4387938e5742b3aab8469b1bee2bbcd34f0d3fac04fa28264a01bb61f569892ee8ce695e8fe24bdf4d84555cb8

    Download Submit