Overview

overview

3

Static

static

3

20d22359be...18.pdf

windows7-x64

1

20d22359be...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 02:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    20d22359be01962accac13d993290a91_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    20d22359be01962accac13d993290a91

  • SHA1

    b294faa4b3ccb3cdc984ec46b7a877f44feaa14b

  • SHA256

    ba703ede5e9df121f63e85fd14e67b19b44d6a14d41c33f4f33d8a068bec4dd4

  • SHA512

    1e5ad9ad369e7c8966bd49d2344fd525ffc537ca063c22ff4893b0d85c3fdcd79dbcdec1e6f60e1f1c6daf2960980b61dae845b6d7462b0f001773c04ae38ae8

  • SSDEEP

    1536:B9EFwSz+VqmZjjla/C38J06NVgZ4hSB0cewJWCpOVivjruPEuHWhSxTRpgG5:LGqpZjjlSCC0qVg/tvuVivmrpT3r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\20d22359be01962accac13d993290a91_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    588383ba94f0a58d11d01c31cbad72e2

    SHA1

    5fa991938506d6328cf00948fea02e6e2b2af17f

    SHA256

    3a69c65b2ff23127781c9c8ddc46a2ef8d468d5593e8b8a2a507b8229a3371aa

    SHA512

    9ef299fdc4f90e578f04b6876f430186d70b0c2c7d2cf5bbd6b2bbb97d66262e8fbbca1e91beb729c3bc7cf114b4d0d898bace06176db3facfec5e4bdf9b198b

    Download Submit