5e8fd5bbfdb9d1d55cca80d9a4ad9be8b9fa849ca11aef1c056ee1442016f465 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
19/07/2024, 07:06

Sharing

Report Analysis Logs

General

Target

5aec130f38dcb29bb5f0e4039af05b34_JaffaCakes118.pdf
Size

3KB
MD5

5aec130f38dcb29bb5f0e4039af05b34
SHA1

0e57e3bbf7e23820597e950c01c5c8adef606e88
SHA256

5e8fd5bbfdb9d1d55cca80d9a4ad9be8b9fa849ca11aef1c056ee1442016f465
SHA512

7a546c0a06ed604bb0abf91204aa9f7b19400d06fea567a7fc5960c984dd2947f2b8dcee00cddb4768b95c21f00dbc0e6bd9e4c69199ad14b73f17dad6beefa7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2228	AcroRd32.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
2228	AcroRd32.exe
2228	AcroRd32.exe
2228	AcroRd32.exe
2228	AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5aec130f38dcb29bb5f0e4039af05b34_JaffaCakes118.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2228

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

Filesize
3KB

MD5
de0b280faf59dba9e642b9d66f3d1d60

SHA1
88013364f3d9e4185b19e1d60d5f52729642e53b

SHA256
c56ae11d4121ee316eadbba9526a6e3527cef00fc672c5d9b859a1b601a1a9c3

SHA512
7077f0c02905e0bb12ab0a5b65109d086f24da9e71b796073713b3e6b5ab908f31f6a0240d883c9a6d56e8a52bfcdef358086c7145261bfa3b958cfe51921f00

Download Submit