23fc8c9d90e6145fbe64698962df85e3598fca892810024b23e312e5aac100f2 | Triage

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/07/2024, 21:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1c980f09bd7cd412fc7f3cb2c4a57621_JaffaCakes118.pdf
Size

96KB
MD5

1c980f09bd7cd412fc7f3cb2c4a57621
SHA1

3c3de4f35a87fb3a32ca396e64ebd069e66911dc
SHA256

23fc8c9d90e6145fbe64698962df85e3598fca892810024b23e312e5aac100f2
SHA512

092e7a28b08c5566bd659d545691af62432b93bc80a3da0c7ded3ec82fba8461f924dfc354f9ed45b9eb1c68bf5a278ed636903d25878a6219e2473d6c9e656a
SSDEEP

3072:tPHzUo0UCSbSiAHUFRyKxp6wnr0aZuwfx:tmfy1sgyEMwrR

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1640	AcroRd32.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1640	AcroRd32.exe
1640	AcroRd32.exe
1640	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c980f09bd7cd412fc7f3cb2c4a57621_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1640

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4de9d1fa52e77973e3e1cbada6403277

SHA1
6ad8180d3a094dd1be13b8aa68effbec758b8ce1

SHA256
2f5c28659f87163716b2fead12c09f9fd8755b52cc4d77f0991f256efc22168e

SHA512
9a306b815926dc5ecfa4a7e83f96102b7e16b1596e7f1a82590ca03cfb6f5aff678b6337fcf71ca6819734f93f2a6cd759b109757c35af194cebe0008fbe3e9d

Download Submit