Overview

overview

3

Static

static

3

b6de2222e2...18.pdf

windows7-x64

1

b6de2222e2...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    17-06-2024 04:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b6de2222e2500f8a4c703bfbf217ebaa_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    b6de2222e2500f8a4c703bfbf217ebaa

  • SHA1

    0fcc88650162bd97857074d2ba502a24b2847772

  • SHA256

    925af2d23eae5d7012293ac8ceaea569f03097055a9e78058e6d51b4d1b8727d

  • SHA512

    666976d50adc39f39b6c66a8939e93db235d0146024e867d91c74eeb265e36e128db77df058aae1025c5c58e3c3e7d6f76da16a8874e3d4e34702014a0e1df54

  • SSDEEP

    768:EgGzpD3p9OKTfJNZFDfPCD2ZrcxbzMenVdVK2VWYDompY2+Xl24SoQyu1kI35VJC:xGF7pKbzMenzVK2VWTmY2+Xwhyu++V8P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b6de2222e2500f8a4c703bfbf217ebaa_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1484

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2c654c18043d47490f6edae8953f1e18

    SHA1

    8f4e3a8f1a75ab55701bfc0fb64785bfa102bff6

    SHA256

    9c58dc5f9d0bd3d942015b873a6fd4c7ddd35977c88acc1d30e727963cbfffca

    SHA512

    844390b061d96885c06ea98540eacdb5168bed8f2bf1e745c73a6a8536512c319749b28b254b16ae2dedc1ccb6fa7a3caba5bb5ee631ad390e328594b2a43b49

    Download Submit