9f2ff7a9674d8e674bb5daca1380bd1700cb1c940f0da0b2db51dac508b97ea1 | Triage

Analysis

max time kernel
94s
max time network
19s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 14:34

Sharing

Report Analysis Logs

General

Target

4a168237f28a3331b7ed9b927fd510dc_JaffaCakes118.pdf
Size

2KB
MD5

4a168237f28a3331b7ed9b927fd510dc
SHA1

d54ab4313c2f270a026873187736f80c1c47df33
SHA256

9f2ff7a9674d8e674bb5daca1380bd1700cb1c940f0da0b2db51dac508b97ea1
SHA512

ab3e358b9e848b12707e3d11788d04d9b923e55ecf3eaffc46311705156a24e67c2a9e9e5af53e485df3877a358f1c3fc1e104a0ee807f35775a1d6b1b24aecd

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2540	AcroRd32.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
2540	AcroRd32.exe
2540	AcroRd32.exe
2540	AcroRd32.exe
2540	AcroRd32.exe
2540	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a168237f28a3331b7ed9b927fd510dc_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
e77a38a5b87a85581681ed28d811ccda

SHA1
123073016b4dc6038a0b29c880e905842ffacc96

SHA256
1cabbfcd4c73483a60385927e81c69980777755a800dfd9960ea019b863a58c0

SHA512
f5a4190eccd7decdb5e0a91f0a35a9304f7c68b4c74d82ce8cd5335fd16a70e320f43e99045f25970aeb7cc130812c8136b923964321a44a245eb7217bc0f367

Download Submit