Overview

overview

6

Static

static

6

6516c9e241...18.pdf

windows7-x64

1

6516c9e241...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 22:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6516c9e24165b700d04e1fa40e17883e_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    6516c9e24165b700d04e1fa40e17883e

  • SHA1

    4dc811ac21f5199478a6dd8147493e2821e8b875

  • SHA256

    af87c4f78ff77c62c9d4f99c1e615875f902353980087d0e369825c63d818760

  • SHA512

    6c0af3e9fdc4ab304efa5028f26e9168f39f41783812e1cb6a1a4900427efb15d4d0766fd098460872d88f38a810abfaff991a0f2de9de8246b85040b76127e5

  • SSDEEP

    384:5PV1rUsEgKQG+KI5R3xfp95DGtXsjg2WHNqKBFS/9RZ9gocOGGY5:W0KlUpxfAtXsg2WtqQO9Rvg5t

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6516c9e24165b700d04e1fa40e17883e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2316

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    89d3a8edba1f2b10f300b90d282b46b3

    SHA1

    b328534c4c0f01466dc03ea40d0b1f5a18512b61

    SHA256

    3bb4683ee4464994d392f30b11c4cd893c24b7b2747a687798850b4f94660e35

    SHA512

    0024e8b4009643c03ae36c9b17cb4b7acc29dcc48f39a3cfe1f0e9b864206d6da7038709b06bd69a60d8ac51f72225b9e3fa77b632a8bd57bd50fd3ec2edde25

    Download Submit