613c2f90f2aeb2e96a8dfab36641cdfcd8bfb18281362660cc5c08bc4c9056bd | Triage

Analysis

max time kernel
119s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/06/2024, 13:35

Sharing

Report Analysis Logs

General

Target

9ad4fef950fc36fb213ec8e712195981_JaffaCakes118.pdf
Size

30KB
MD5

9ad4fef950fc36fb213ec8e712195981
SHA1

a2d4faed47b0ffb25a5361fec822eb12943547bc
SHA256

613c2f90f2aeb2e96a8dfab36641cdfcd8bfb18281362660cc5c08bc4c9056bd
SHA512

df25b4404a3824cc6432eae8eaac89680d84a225bf426ab1c16341c726d1b3ede9212a4dedf4a2ca0ff385c80d1d40b1c745858093bea11faa1cd4c9d6d279d3
SSDEEP

768:VXuMZmwgCLWargpZs4Y0Qc9me9+/gJzeC:VXFZmGWS4BQ9IJzB

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2300	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2300	AcroRd32.exe
2300	AcroRd32.exe
2300	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9ad4fef950fc36fb213ec8e712195981_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2300

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
ef9c32d27cd8f1786ce9ee9b23f02717

SHA1
759fbcc94cc3a74e2a577517d2f816cecf0eeab0

SHA256
b5b6705075c848eaf7155b4021ae491ae7960427472a089f920b6fbb482205a2

SHA512
a6b0cec7385043722118cf662cfa66e72326aabefbc6a46f5b3acd89c39828e251144f7e03b68ce38203a9dfca64b0a0d11d8dafe6ebb9d8c90be0a751d89d75

Download Submit