Overview

overview

3

Static

static

3

b6e095d09e...18.pdf

windows7-x64

1

b6e095d09e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    17-06-2024 04:58

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    b6e095d09eee1aa56e301ee765b1cc5c_JaffaCakes118.pdf

  • Size

    50KB

  • MD5

    b6e095d09eee1aa56e301ee765b1cc5c

  • SHA1

    dafcfa520ec66251670552c8d15638f70b16fc9f

  • SHA256

    396cd65d6d9f3923d560a4c4add70eab577269e4b71503d6bfd3fbb42e632ea7

  • SHA512

    712ccfda25533925773e8be78aea1b80914b31edd678e04c222c32fd2d3812590944d44a9456756fbd256bbd66d49ba5e36032f3c8725b9fcd31c2d08bea6b91

  • SSDEEP

    768:ogGzpDjpvK+DgRx5DRM8xNI7mM8e29Et96680RWA08h+DG:lGFXpaIavV9EP6oRWA3h+DG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b6e095d09eee1aa56e301ee765b1cc5c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6eb30285db06c932a7400480bca1b7a3

    SHA1

    e3a2e7cbaf9484e9339cbcaa329e0dddc41c476a

    SHA256

    3ad8558976d42e61032900337fac6f4b737e305d5a4d988bb08f0d008c8ca5dc

    SHA512

    4dac022832462524a4b44c1d6e5a0e962e3d329723f22c6b40755aa522ff6edbb9ffbe7c64e4776cd9efa5e9391488d3e9d05277aafb838c827574ef4d213670

    Download Submit