4f61ef484b87bb06da0e934b2c114b2b902cc1d77e6672c8b486b045812c1d16 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 07:51

Sharing

Report Analysis Logs

General

Target

1958e34f61651e351749fb19ffcddd8f_JaffaCakes118.pdf
Size

1KB
MD5

1958e34f61651e351749fb19ffcddd8f
SHA1

90c2bf5e85a63f3ea11ce3794b0c0d196a95da30
SHA256

4f61ef484b87bb06da0e934b2c114b2b902cc1d77e6672c8b486b045812c1d16
SHA512

613222a60e6bf7d37c2749e7a2c8bb1694a30a490828bbfc740dd76d291fde2aae9fb407ac054bf08689d82a38b0e58db3d3140909b300c32f56895f43951cdc

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2188	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2188	AcroRd32.exe
2188	AcroRd32.exe
2188	AcroRd32.exe
2188	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1958e34f61651e351749fb19ffcddd8f_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d10efdf357e044c73e294ec94e7a5cf0

SHA1
033facf7fbd502d6940e5d1dc2f7591818fd936f

SHA256
4d2f5c4b45e58abc69ebaef8b097a049242213147cb4b778ac626a7b3a11d02d

SHA512
5db5c2fed615321c924f519ef505237cb4337fe3ff917139704946a6083c4ed53ed80dba01ee40abd7c384c0caacf08e40cc536c661d93af8034a25fb4fa9e28

Download Submit