8f94f597bdf02ed4f0a8eca868dad2d2de119d790a78095973699eeba5fe17b7 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
28/03/2024, 20:04

Sharing

Report Analysis Logs

General

Target

0ee1bc8aba5087e96dbaf304678fa557_JaffaCakes118.pdf
Size

96KB
MD5

0ee1bc8aba5087e96dbaf304678fa557
SHA1

40666e22065f13b55624efd5cf322f704c7309cc
SHA256

8f94f597bdf02ed4f0a8eca868dad2d2de119d790a78095973699eeba5fe17b7
SHA512

09e9ef76c5aa0cd481480ce939bd6235e63f5fe6ee1c1ae909d3ea01f68a49ec2ca0c86e54251fcd560d64828c1895817be62843d0634dfc8d0800d14411c19e
SSDEEP

3072:kCVCdLbsl0g8VNvnjFcNFcMrogME2VCCn7:kC+X7tvxnMih7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2908	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2908	AcroRd32.exe
2908	AcroRd32.exe
2908	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ee1bc8aba5087e96dbaf304678fa557_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
c8d2001a9641a92ff42618e2674596f3

SHA1
55d2fccd7148a76a1e39538a53e881928212fbee

SHA256
19b64ff4443bad64e6acdef5ab2667174b3f39c024e5aed120861e89d7c4907d

SHA512
9a504ea60f537f9ba102d481a8f1bf01265d62503568befec88796dc44ba66a161abe388edc29423983344430f0e4a2f75bb286d6db409d39627ed9cd9f7d2b3

Download Submit