0264fe7f38bc537badb4d4cbb5404f1dc3b998a66e8c5a7535e3980092d8e25d | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/04/2024, 13:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fcd2b44be3b8844561abf909572be587_JaffaCakes118.pdf
Size

97KB
MD5

fcd2b44be3b8844561abf909572be587
SHA1

921fceae8056c34c91ca940f560250132608cfb1
SHA256

0264fe7f38bc537badb4d4cbb5404f1dc3b998a66e8c5a7535e3980092d8e25d
SHA512

60a3d86fac3dd030921a96f1a4800ef0b6908e8925c8146f7d5323a3adb1fd2821b3f484b02ffc2cbc5cb5df59911f67121071613eb796d14de50fda628568da
SSDEEP

3072:uSMwpf2SbRHjgxrFjN1zXZz7b8n1S7dDCZ:3pO4d2jfFz7oSK

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1284	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1284	AcroRd32.exe
1284	AcroRd32.exe
1284	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fcd2b44be3b8844561abf909572be587_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
9e88c063e4b19084cd3bb5b4f27990e6

SHA1
6ecb8bd56b77d5705dc6c385cb22ff9866e5f0f0

SHA256
b7c46d012da6d06528114a7d32ca8a6e99bdd01dd50c6534839d8e8301c0947f

SHA512
67f864ef2dacd7a69802143d1f2fb392c2c9ff24fef8c2a8e5c00d8289e8151fcbd1294cb31eea7232758d291b8098577c094656c61fcd6b0e0dfa8d647756ac

Download Submit