5e17b7ab70671a0b4ba005185ae624ea56720162f06e4ea7eb5a86fb87121d5b | Triage

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/04/2024, 09:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d013b66bfa5d61c0215f14f80c222ea6_JaffaCakes118.pdf
Size

97KB
MD5

d013b66bfa5d61c0215f14f80c222ea6
SHA1

a64819a4f5d632bd9f4c270b1a8fb9d484f81039
SHA256

5e17b7ab70671a0b4ba005185ae624ea56720162f06e4ea7eb5a86fb87121d5b
SHA512

50b4229523d3d10213b3c0891d5ae892e12a7027a45d3a36be5933358f4264bc611a7d542ff230797db97d58fa5d11ba76ddbc07c1c5961d13f849a36e150b98
SSDEEP

3072:ea+e0YqTKTb3p/GqtXV8cTm1hUtX7od/H:BEKUqtXV8Om1h5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1556	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1556	AcroRd32.exe
1556	AcroRd32.exe
1556	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d013b66bfa5d61c0215f14f80c222ea6_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1556

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
265bf9f26e1fdf490ca3597fc110e993

SHA1
0066cfb46eb6e82bac465a5a3b56f333ec43c802

SHA256
c4040e1850d0f01d2b0d026e9aa36bcd29f9e20e681a8446a686401a9dde6f05

SHA512
2077f6467160884cacd780a7fec25edc4fe8d792a445cf10f7c3123379a3efd845133bf7e03eecfbc95f8aa7ca98f2081f9417d85292224f3ed9c52b23cd44d4

Download Submit