Overview

overview

3

Static

static

3

3cb94f6dc6...18.pdf

windows7-x64

1

3cb94f6dc6...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2024 08:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3cb94f6dc6d1cce5756228a8313152a2_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    3cb94f6dc6d1cce5756228a8313152a2

  • SHA1

    dfe1c34709f1919146b8851c042f48d87254efef

  • SHA256

    b7eda4bde99ae6232708fc2cedc99b74e7aab81580dc5e6108d9b40c417ec02a

  • SHA512

    2e1ca1c1b92377ba5b48b9bbac0cd93d073aff0e078afae7324502195f82dc96017f7ef6e3fc980230799a8c33cf4caf9c807d9d8959fcaf3201eecae78bec4d

  • SSDEEP

    1536:UwsxytwEZiw98JeMWLlfodtkBBMVamj+kGAW4w7MC8HQBy86UMWspO2VaD:/s/E588MWlodtkB+VakGzYHKb/2o

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cb94f6dc6d1cce5756228a8313152a2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    8ec396b2997e97d63b5e2a85b8e7c01a

    SHA1

    fd021e16734c2e6219314723eafb73e66558c7a1

    SHA256

    3ecbba38e1686f9686db75de679c07667890f48f1f06f550a136feb811e14e11

    SHA512

    428f5141df6e9d5ed8bb13d6dafd63ed57c0e16ef5a22b896382281ddcd80dabdd9c0c407c70ed861108704f9b876461c7b71cab6ef2ec5abac8c9737d6de98e

    Download Submit