a0829511b911825f070f825482fe44163f730db813df4526e006cdc877048513 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
14-07-2024 08:22

Sharing

Report Analysis Logs

General

Target

450785977f80c020105112040c40b99e_JaffaCakes118.pdf
Size

3KB
MD5

450785977f80c020105112040c40b99e
SHA1

977f34a04c79e157c5b014196d9a37db5f8d0722
SHA256

a0829511b911825f070f825482fe44163f730db813df4526e006cdc877048513
SHA512

42faa771233575852a3712a71ef7a72976ee5982cb82f08cd442ce7065de4c55f526703d498ec0070611af3503f8686e27966e3cec6ae4a76f4247344417a359

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2480	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2480	AcroRd32.exe
2480	AcroRd32.exe
2480	AcroRd32.exe
2480	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\450785977f80c020105112040c40b99e_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2480

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
13061256425656b9e09dc34a7ac401e1

SHA1
b238f9e86a666e1365fa33765472c481079ee919

SHA256
33cdc59a59fec030216d309ffdfc5dff7cb833f712493a6aec5bb97945c8a054

SHA512
e31f8b74242f48556f3db1615a0467bd77148aa7012058cad333505146fe2a00a4e5e8bfe89c02dd417728676a9a32a4054cb537da7244fd5562c3fbeac84387

Download Submit