eab858df2ff4bc5add7b2620bf13a3407906a7f437ecde0504899b82cf8c5c9a | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-05-2024 00:18

Sharing

Report Analysis Logs

General

Target

43bdb9060606d49da8cefcd2ce08cf3e_JaffaCakes118.pdf
Size

3KB
MD5

43bdb9060606d49da8cefcd2ce08cf3e
SHA1

0f21f4b3fe9a47254be90d38184b77082c873aa4
SHA256

eab858df2ff4bc5add7b2620bf13a3407906a7f437ecde0504899b82cf8c5c9a
SHA512

89d65c29d39b61d7771972cd6f318c835662ccc9333085b14bfac0243170c0c6b8554d48b6c77c3264c82e9dc28668ed4391dad4fd4b9d4817358477920503bb

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

2940 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

2940 AcroRd32.exe
2940 AcroRd32.exe
2940 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\43bdb9060606d49da8cefcd2ce08cf3e_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2940

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
bc3908cb89f0b38a68b74a90e5240022

SHA1
8aed696af1e7833e863ed0ec6e3c31759b7c96cf

SHA256
68d34e558164cf52d1b4ef6f923ee5dd47888795d314ea1c91e2b32619296c06

SHA512
a4e40a82cbb72c023cdf807786cb48387fae474ef5817cfcfab886a9f931fc6b08bb40e9243246173c3e8e7d84f26d5895fb5cc2a34b297757c66b966117acf2

Download Submit