7cb898b243ec2cae3ce8135cff494bfcc85a49e3b03dfb32cfdefcbb879c4280 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
06-07-2024 04:08

Sharing

Report Analysis Logs

General

Target

2756b5c336ac1abf0ddad4ee040e21fa_JaffaCakes118.pdf
Size

2KB
MD5

2756b5c336ac1abf0ddad4ee040e21fa
SHA1

8588e941e62aa7133a578bbef9f6c3dfc33c23cd
SHA256

7cb898b243ec2cae3ce8135cff494bfcc85a49e3b03dfb32cfdefcbb879c4280
SHA512

9209fb50827d376cd91be73c5eaaf859afd7e3b29f76707eb108add16d7775af930f656a1bbdf0bd02f940319d5ec80b9f82f28bfadedce1d9ffca47736606ce

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1832	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1832	AcroRd32.exe
1832	AcroRd32.exe
1832	AcroRd32.exe
1832	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2756b5c336ac1abf0ddad4ee040e21fa_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
3e9d2a2e93d0c619bd7f43b7ad859b2b

SHA1
d198bfdc107f83624c411bb1887a1fc71f6231ff

SHA256
30b0776f005412921c386c46f103fd536dae249c2b8ce9fe69ad94a120781b0c

SHA512
a7849de607f1204efa3f698041525082c7ad1ed58144e2c2b349cd73c936aa10abd2b88418353d0a1de567bb2b767aef6e4f4ab24ef80995b6b631b4e8bd322d

Download Submit