Overview

overview

3

Static

static

3

b66d4924bc...18.pdf

windows7-x64

1

b66d4924bc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17-06-2024 02:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b66d4924bc83f565a4471cf1d212c4f6_JaffaCakes118.pdf

  • Size

    57KB

  • MD5

    b66d4924bc83f565a4471cf1d212c4f6

  • SHA1

    d31ade538db5f7ce4759f7f49637c72322e97fd6

  • SHA256

    9bd1bd0bd6f89d87860f58da4e26837f5e0f02f922b9075a8f6e53d792972887

  • SHA512

    23d40def57900e2080bcc453f6e64715c0705fe56494481c4e2b4bd9dc326db998cb566c4f24a9113b6301afca598670c6aeea83b17dfa52a237e90db4f75ad3

  • SSDEEP

    768:7gGzpDDpM0Bl9mVq5ckLZlLiz+womakrW13wYgSx4+sSdeGLlpRJbCUPBGJYO4cC:EGF3pMOlAVoLZZi6vZD/kYbcJguqV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b66d4924bc83f565a4471cf1d212c4f6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2ac436c9607fa5fff090bf7d2854e644

    SHA1

    1bf66671c52391a2bddef999c2b66097258b6435

    SHA256

    047b58d7b6f29ad73cfbe81140f755790d7364241f7cf3f953bde4504225a19e

    SHA512

    aa9d2cf9be64bbb7695561c074364e2936a7c34a0c600a15d3124a9dfa410f3d8b72418167e736f304cca78313497fa7803cee9a8dcb15e032f1a9e44fbc4b39

    Download Submit