1e8347aede3d2740de538e13cd459889f580f7cac703d44f3980a7484baa81e8 | Triage™

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
27/06/2024, 03:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
14901c56b943eb8c79b81336af019fff_JaffaCakes118.pdf
Size 3KB
Sample240627-eanvwstdjp
SHA256 1e8347aede3d2740de538e13cd459889f580f7cac703d44f3980a7484baa81e8
MD5 14901c56b943eb8c79b81336af019fff
SHA1 9fd3132ef592961c87069c667fc1e284c1ea2d9a
SHA512 f1d2db587aa7bd3bb1b3ab53145806820ff0aab08079210e9794c77d0a9338b37da31c43c6064d9b4d76c4e6603b0a476fc7f966409800b9c02197e537e15abb
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1372	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1372	AcroRd32.exe
1372	AcroRd32.exe
1372	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\14901c56b943eb8c79b81336af019fff_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

SharedDataEvents

Path C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
Size 3KB
SHA256 39249caabda3e0ccc972c1742b7a9d90d2546aea98b55a8fe49ad0195a5e04eb
MD5 c571cc11ff630cb4a5e687d5ca97567f
SHA1 4cb91c74ec5e989ef1feb079432137fad7cd5a1a
SHA512 aa28b9823bdca8ce905d52013dff0767540fc64e2993abd541d85273e1120794278445df61f17cd5b14cc5ab0762c8613ce18ae6a86225e0cb2917dde62c10a3
MD5 SHA1 SHA512

Submit Download

memory/1372-0-0x0000000002CD0000-0x0000000002D46000-memory.dmp

Download