37f4566e5f47caa733aff104c9b57f31d816ec952f72713401092e52329a0e99 | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/04/2024, 02:02

Sharing

Report Analysis Logs

General

Target

f00a6774d5c93d77154b39d5c7aec5d5_JaffaCakes118.pdf
Size

109KB
MD5

f00a6774d5c93d77154b39d5c7aec5d5
SHA1

de048639e69e27fd7c2e5fec96c51e1ccdaef60a
SHA256

37f4566e5f47caa733aff104c9b57f31d816ec952f72713401092e52329a0e99
SHA512

c90a954f1cf6af1dff4703c43396b5d2c55606dfebf5fad7f1b47dadd2dc51f249a81d308ea0c4b48979f41ba0028a71051986940b18b0bde19eacb42cfa5c77
SSDEEP

3072:p/Y1ydYIA+k62iD/a7QUESFBcpWwMyIJi6:1YZ7j6Bp6LoWr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3048	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3048	AcroRd32.exe
3048	AcroRd32.exe
3048	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f00a6774d5c93d77154b39d5c7aec5d5_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
2b7b8fe582b3fc643b5160ce1714572b

SHA1
3ffb85c159003405ec1033f6626282fd8609c4bf

SHA256
de1f5949213129a5f59461dfe4c8af5057d67f5559764f8a2ad2179322eac876

SHA512
e99b0d031183b618ab79aad74ed3317a8b4af1137826d89d3006586ceea955e3f517d086cc78e2b4313028781b8c527d44ea6df8a9550ace3617d8c9a894277e

Download Submit