a4505977bb9f803efb649f50dfab0f8cfef613f00cd3e1af3e856115bcfd7273 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21-04-2024 17:02

Sharing

Report Analysis Logs

General

Target

ffc106dc046496b9a9bb230f0cd1c856_JaffaCakes118.pdf
Size

32KB
MD5

ffc106dc046496b9a9bb230f0cd1c856
SHA1

7686eded80e79fb39f416a7b283cfa006924b0db
SHA256

a4505977bb9f803efb649f50dfab0f8cfef613f00cd3e1af3e856115bcfd7273
SHA512

7cc3be2c32467be4512783e0895abf83063c18084f36493f633fe525626a2940117b37988ba9d6a0ffcb8a5c7013b4bbf71091411303e76f01b0cf90cd41a87d
SSDEEP

768:vJlCjmsnS+hI/TvRft6BBvjO9edbYKyCr:26RKSrVEYXZCr

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2240 AcroRd32.exe
Suspicious use of SetWindowsHookEx 4 IoCs

Processes:

AcroRd32.exe

pid process

2240 AcroRd32.exe
2240 AcroRd32.exe
2240 AcroRd32.exe
2240 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffc106dc046496b9a9bb230f0cd1c856_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
66eae7572f1144796f8cc15e7a169009

SHA1
d158d3149877e388a79568e4f925e60140ba15fc

SHA256
155e8031e6db9ce1a3b25a02ed15a640a728a425a27566fb687b4f750e060fe6

SHA512
a9fc6f9acaf7c96f7bbce0b09d1420ce5f0b840974d6534173f099f10a2478da809a56fac3aa4b52eb0d789607707c9b675ff5c8b19526bb6801c2e91f67407c

Download Submit