Overview

overview

3

Static

static

3

3fea0b3bfb...18.pdf

windows7-x64

1

3fea0b3bfb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 02:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3fea0b3bfb0e4b27a46843327c49b669_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    3fea0b3bfb0e4b27a46843327c49b669

  • SHA1

    55ef4bc040a112c24fe899c18cb2cae5a757c317

  • SHA256

    0f7b7cb0c045e61a7e846c3385d14ba484dc24b346e5ba01951ff781e939c659

  • SHA512

    dd9484dc62801d487754651bdf532157d80daf5f690b8ef3b264e28ab2ace98ae48bd87e128e662b4bb4fb5dd908e5105ea3c8179de93e62fbc4f99c89f63f47

  • SSDEEP

    1536:KIzgwy5Bk0XrahSGeLfn2FjHSEZfSHJny/ycWGpOmJWTdJKp6ifr/ta:N50USvLP2RHSBgqBmMdJDiT4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3fea0b3bfb0e4b27a46843327c49b669_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2584

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b04dd2d4035bc5d85732d224eda89f76

    SHA1

    68759076d84912abebda06ff3c58dbadcfcdb14c

    SHA256

    b424302918308180f53d28a19b3fead71508d78a9a77f46659d0f3148b9b3d55

    SHA512

    abaf5db4cc62f84b82a80ea989ff752724189da09f838e7abced762742b443a0cf18631b04ce2b856ba0e392ee40eb9b5bf9a0e171f4464d14ac15a35f324f4c

    Download Submit