2293ad32acec355fdb91c6e919ab21b0bd341f01b30cbc8db1bfc56eb933b722 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
13-05-2024 21:43

Sharing

Report Analysis Logs

General

Target

3cb09885b3974bcb249993341bd2da7f_JaffaCakes118.pdf
Size

27KB
MD5

3cb09885b3974bcb249993341bd2da7f
SHA1

42d831617691ea5ff05476745d609121437eda43
SHA256

2293ad32acec355fdb91c6e919ab21b0bd341f01b30cbc8db1bfc56eb933b722
SHA512

829cf8c04ef9d0e161e2d6c602b84c7dbc36093604c27815eacbd3ba99541108b42b1cf647af5c743bf9cae2b5902de57ff11efd7eacaadb1abcd6bd3a7faca6
SSDEEP

768:TXuMZmwgCLWartyE9MekHSQzm3eDll0A1:TXFZmGWSrrQLl0A1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1992	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1992	AcroRd32.exe
1992	AcroRd32.exe
1992	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cb09885b3974bcb249993341bd2da7f_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
19a6f4d61bbaeadcfdc3a07db559adc7

SHA1
f5cdeaa28e78b957f323b205ad50fd4158b0b6b6

SHA256
bad9f58aee8a80bbdcc04b413ad3903eb4dd5b56beca557c06d6dd1154491cd6

SHA512
a252962a752431e7c0f6fc444db6ad215fdee21f33524ad24acc39c9f42514eb271f886fd9c5b0b7ab3f2a648b486b73b4769e2ae96a206d2f6870377bae8a04

Download Submit