01030ba293b2ed70313d2f69ca8b201a0fb6fd2e9de3ee36fff01966779ab6b5 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
04-06-2024 22:12

Sharing

Report Analysis Logs

General

Target

966d518b5c880b02d0cc84fab51c7fb7_JaffaCakes118.pdf
Size

57KB
MD5

966d518b5c880b02d0cc84fab51c7fb7
SHA1

67e981a6c3ea290ce1c6364525d981fee00ea3fc
SHA256

01030ba293b2ed70313d2f69ca8b201a0fb6fd2e9de3ee36fff01966779ab6b5
SHA512

982a9c32d81a2a024d313048f1101218d23e1a191abfb935a1fdd044aa988cc2f1099074559e2ac22dab308203ba58b3a86abcb571952ae50865dfe3c2fa9eec
SSDEEP

1536:VGF7pLKafc2aYA528yXBnZ9SA96tWRODo3:oF7p+niRLGY

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3024	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3024	AcroRd32.exe
3024	AcroRd32.exe
3024	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\966d518b5c880b02d0cc84fab51c7fb7_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3bb6f7763150e0b1f0b0665e26cd577c

SHA1
c9468a4ac42ccb4573a5d430b3f3e74e91c659e3

SHA256
4d9964f4610202759369382eccfa73303afb28c0467ba3898bad7eaa47826408

SHA512
d73c988d2df5c47eae8dcee53ee21da8e830477e6eab19faeafce77635d8ccba1f47c399af732de2805ae0aa1be614b478212e8c1d47bdc05ff1eca29546f17d

Download Submit