34b8a18043acfbaced96331bc28d8f8ea202be47bef86562deb2411202112f6f | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/06/2024, 09:08

Sharing

Report Analysis Logs

General

Target

0497443ad5181ee953f5226b1e552ceb_JaffaCakes118.pdf
Size

96KB
MD5

0497443ad5181ee953f5226b1e552ceb
SHA1

dfa6667d97f329e7c17a6f5fd45e5a87bd9c2893
SHA256

34b8a18043acfbaced96331bc28d8f8ea202be47bef86562deb2411202112f6f
SHA512

f436becf11a5aa20edc250ea88e5ab73531a35fa0ed619c99e4eada838b3091180b3932502fa97aae8763d487889e6a9c7662893150535e2d3bb327f24bbc414
SSDEEP

768:3+dvzHnQkF8sRNVjB4msseL/vH0auRkqj/wQ/p:pm

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2232	AcroRd32.exe
2232	AcroRd32.exe
2232	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0497443ad5181ee953f5226b1e552ceb_JaffaCakes118.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-0-0x0000000003600000-0x0000000003676000-memory.dmp

Filesize
472KB

Download
memory/2232-3-0x0000000002100000-0x0000000002101000-memory.dmp

Filesize
4KB

Download