c2b219febda993248c53ca0d13cc5b8dc0d637763bcf3e5b03a0836c4def078e | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 23:46

Sharing

Report Analysis Logs

General

Target

4bed7585b4ba5b940c5686024e76cbb7_JaffaCakes118.pdf
Size

1KB
MD5

4bed7585b4ba5b940c5686024e76cbb7
SHA1

68eb7f852b96bedc29aad270af3f16fe03b5ed1f
SHA256

c2b219febda993248c53ca0d13cc5b8dc0d637763bcf3e5b03a0836c4def078e
SHA512

81ccaa5570901c95a8137591e3c24f40da7d58af4405623afe1f9aca30d8e75257f9795d4b7bbb360f065fbd19c74f1f28830e567f2adef8a15f8d5e1af15ff1

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2088	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe
2088	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4bed7585b4ba5b940c5686024e76cbb7_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
4fc21d21b878885b5f54aeaf6b9cb1f4

SHA1
26b9295c3e1e7eeadb3123e838dd61751dbc48b5

SHA256
c4cb48ee3d3529a0c46c7b3917482ce2a9d143ea95dd49bae6218b7b7293bc66

SHA512
e445a547bdaf0618064e29abb90005fb92667696cd9c1a1eb0b0bf355d381044a6527358adf3a2ff670023a3dd109d0fba7f5a8690547279736647acdbc3392c

Download Submit