f04e10d468733fb0ec93fdd583a36117ea10d43676cbacea73be0f77d9c3649d | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 21:52

Sharing

Report Analysis Logs

General

Target

4b902dbb9943cdc07c020b7f607b7007_JaffaCakes118.pdf
Size

2KB
MD5

4b902dbb9943cdc07c020b7f607b7007
SHA1

2bb081bf3d11bbcbc22460a168875c71f02ea6f1
SHA256

f04e10d468733fb0ec93fdd583a36117ea10d43676cbacea73be0f77d9c3649d
SHA512

13d538cd5d63cba23fd966fb65d25908f7c734df051d272b8ffe51b2a13308c4bed0ad6e6b6d0b96608230500bc6ddbb567713e9c27172ebd2935a2eb3dee2a2

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3052	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
3052	AcroRd32.exe
3052	AcroRd32.exe
3052	AcroRd32.exe
3052	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4b902dbb9943cdc07c020b7f607b7007_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
11b266a162ecde75f6d6cf52cac12134

SHA1
4c8bc5ab60868fec6fe2ade94c4f86b2227567e8

SHA256
82c626b009611998d48aee6bf658ded4f2ab4f5d8dc5dddd1f6614966b14ad33

SHA512
7227bb03afbcf8cc303ae198a755dba7b769daa9531a0b755c5aac809579e47e97c3dc0fecf35f4a4bf022104a48f502d615e2844e34fb0822249c11c72074b8

Download Submit