48cb17d46fd766a2e19ead64ca7da537988987683cf5c1b986c6c258aeab402d | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
06-07-2024 05:37

Sharing

Report Analysis Logs

General

Target

276b74fba2476bc262f53e3124dafae5_JaffaCakes118.pdf
Size

101KB
MD5

276b74fba2476bc262f53e3124dafae5
SHA1

671fffb7ecaa65a4f8c380513bc6f6dfacce0283
SHA256

48cb17d46fd766a2e19ead64ca7da537988987683cf5c1b986c6c258aeab402d
SHA512

3c6f98b106623b96822e47e38dde5b3cc49b4490664e36319375f327d8ee4850e7e83cc5f9d125a1721a7d82296c74a4cde7352937660a03edb9146789798072
SSDEEP

192:WysN0Au92HsX/pU8pIQWcW4FpaAM9NP4F+:WysNO7VM9NP4F+

Score

1^/10

Malware Config

Signatures

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
1984	AcroRd32.exe
1984	AcroRd32.exe
1984	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\276b74fba2476bc262f53e3124dafae5_JaffaCakes118.pdf"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1984-0-0x0000000002FD0000-0x0000000003046000-memory.dmp

Filesize
472KB

Download
memory/1984-3-0x00000000010B0000-0x00000000010B1000-memory.dmp

Filesize
4KB

Download