fc2ce19e04851214e868def824f7a4a06c51fb43c02713b0c75900defff665e6 | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28/06/2024, 11:13

Sharing

Report Analysis Logs

General

Target

19e7fdfb5216e8f53487bd4b10cf40b1_JaffaCakes118.pdf
Size

48KB
MD5

19e7fdfb5216e8f53487bd4b10cf40b1
SHA1

77e5905da338cca7035591b6c057b192660cbc62
SHA256

fc2ce19e04851214e868def824f7a4a06c51fb43c02713b0c75900defff665e6
SHA512

6ab2fd6728dc99aabed926e5ed4aed2b84f580fdfade1b4ff091d4c341812990b824a9ea361b88f86f12a5f6571c30f7498b40cdbd6e96d067831133062953dc
SSDEEP

1536:R3opVmtHJZO/XxBH3v8XzDpnrf3eTR6JJ:q2ZCBBHknBrfus

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
308	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
308	AcroRd32.exe
308	AcroRd32.exe
308	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\19e7fdfb5216e8f53487bd4b10cf40b1_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
d1dcb29b31eef2184e3888ccc68dbe48

SHA1
239994741fba4d4ab24d5cd51f47bcd5f8326e9f

SHA256
7ba3b43275b1c23c29eb510d64023d11effa3b8479bc554a54c9f2c116c95f9c

SHA512
3176be3bf68ef641bd65da804f1afb9a0756436ecd57f6352cd6bb69b3080b4be81a09b030451b29cc6cbe478b1c808ae15fb32a9dc8cbdd69bb07e26f2de931

Download Submit