Overview

overview

6

Static

static

6

0c62998c8d...18.pdf

windows7-x64

1

0c62998c8d...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 03:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0c62998c8d60d6b4a3263305e7df1e5a_JaffaCakes118.pdf

  • Size

    14KB

  • MD5

    0c62998c8d60d6b4a3263305e7df1e5a

  • SHA1

    a08fd2ebd94d7ce72e0ea90960249ce263e520da

  • SHA256

    06a4ad150b75457a476131e425e027cd0bde01f689e9f302fa7da7e555c8a3c2

  • SHA512

    445595516131d3da5e85e5c966d1b2fce0fee43467eb3f7b273f8f2972c8a58a5ddf50f5e4182541dace9031d8114d27ffcfc96ba5a724bece6e310746a4b936

  • SSDEEP

    384:dP5uqkAp4P1dEcCGGr1bkZuwrX5YtLW4NYsTIoPKuuy6fWMlEgxILnHtgYiChy08:Rp4P1eBJbkJ50/NYsTh2fWMlxIbaGU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c62998c8d60d6b4a3263305e7df1e5a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c6e6524ce060e6bfba79e7dcd3d6039c

    SHA1

    2fd662056457cc705b124cd9028f17138120fc37

    SHA256

    0dc58963b43dcff7cb386b75ac8c11edf9e6cccd3290a0595cf796d858b3c660

    SHA512

    d3b0a5d09f6499830e69362d882ac8f8f48ded040888e58c9c79587a1bb254b0d4adeaff18e672ae2f4d0fde0aea87cc3b26c4b1b312ae3e520ac8f33eacd25f

    Download Submit

  • memory/3020-1-0x0000000003390000-0x0000000003406000-memory.dmp

    Filesize

    472KB

    Download