dbecb961311b107d688e4773ed20e19ff6224d7b62bad0abbfa96d0e32d8b7ce | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 23:04

Sharing

Report Analysis Logs

General

Target

68f14aa4ce1459def604641ec2eba771_JaffaCakes118.pdf
Size

27KB
MD5

68f14aa4ce1459def604641ec2eba771
SHA1

9cee324653a0286257aaff7edb3a73c67b258d8f
SHA256

dbecb961311b107d688e4773ed20e19ff6224d7b62bad0abbfa96d0e32d8b7ce
SHA512

69afdd6096dfd07bb725c0414df1a9f0e528f8bc0e47bff70447a6e7a536773ee5d6d3bb8b828d7715214d8f260ec6ad0f040f1f9eb9807c105b1d892d12b518
SSDEEP

768:4X2iccuQ+2AIWQonx2MnRQIZGz/1OoX+0:4X2wAionxngzddO0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

1636 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

1636 AcroRd32.exe
1636 AcroRd32.exe
1636 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\68f14aa4ce1459def604641ec2eba771_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1636

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Filesize
3KB

MD5
7a7e989f79ced629d6fcc20a655c089b

SHA1
db007401a3100e2cd042c368714523b7b0a145be

SHA256
98f881fce57858a868f994d6001b32b7c4165317bb3c5c8e7d2b470b6627b836

SHA512
8e7a7341e725135af5a6dffbd6d38eef22db352def48b81fcd33e4d8d6c55968ff75403c78dcbec65112514a5bd5297b6ed315c3d2453085535fb2580daf1aeb

Download Submit