5796595a526a284096efcf09b831fab34e51ec51297abc5814f6afc695cb74af | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
20-06-2024 16:42

Sharing

Report Analysis Logs

General

Target

07db7e11c6dee23625c28b44b5aa8c32_JaffaCakes118.pdf
Size

2KB
MD5

07db7e11c6dee23625c28b44b5aa8c32
SHA1

b52d417ddcca5429b0e857ecd62a266fccfac409
SHA256

5796595a526a284096efcf09b831fab34e51ec51297abc5814f6afc695cb74af
SHA512

670442ec3df0f58afbac0404424dde25fef4bc5a106abb9317b1ae69f58c45d36fa1071b72f5bf2154e37632cf95702c62703f8115eebfb01a65b1340243013b

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1208	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1208	AcroRd32.exe
1208	AcroRd32.exe
1208	AcroRd32.exe
1208	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07db7e11c6dee23625c28b44b5aa8c32_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1208

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
abd13a433fc67d0146cca5df8ed473b8

SHA1
caf3441be0237558feff850254aca3e4b4534bec

SHA256
a742430bda1879b0c73b78e45a2e99a834aede48825a46c778a159300f643470

SHA512
2d935e7199c7c290eaaf8bff0e63e3183103ca6d06aa93794722c4adfebdaa1e77841a5a6b627c2be58eca079c636299497a783c7652834be9b485609fb7309b

Download Submit