Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
25/07/2024, 10:02
General
-
Target
6f1f99fb147700e91a3d6ddc48fdcc95_JaffaCakes118.pdf
-
Size
5KB
-
MD5
6f1f99fb147700e91a3d6ddc48fdcc95
-
SHA1
fb07aa6296fae4708a1ad31d93f33621318a8ea8
-
SHA256
784bc4e50cf617913e98bd78f05d2c69e77bf0c622d8b1348027a77b05c69cb6
-
SHA512
f90dd1446699063c0f482c98f5a70410489c226c576601eefb76f0c2b94b5cfe875cffe6d94df06c3efc0635d4f3fc1924e369e6ef2cf1e0f44225f365f70547
-
SSDEEP
96:YwcOF4kErNR/kKlkkTRQNhJHxUWHDwX8pfsZQuOp4ce8ny1f8PqdqP2+9pGTk2fo:/ukErfBlzTghJRUWsep4cTnYxcPV9cjo
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6f1f99fb147700e91a3d6ddc48fdcc95_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx