Analysis

  • max time kernel
    16s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    25-07-2024 12:35

General

  • Target

    6f98fc84fd5c0d4faf449887236e859d_JaffaCakes118.pdf

  • Size

    102KB

  • MD5

    6f98fc84fd5c0d4faf449887236e859d

  • SHA1

    65c2a5e12dd79c19f42ea36743301b42a0528c02

  • SHA256

    1dffbab8cd9d32cfe015fb0a24f6f01a0dc4b7511fdc5aab6036b5432f696ea9

  • SHA512

    587192b5d8b67ac234afb055e786473a4dd1b4f5778a63c65b96d686d7fc1bffd46f3aae78d339d6c17f3e6a8471ac652ef85edde892ea2e198fe4c46f30caa5

  • SSDEEP

    96:fzQCD65wwYetiZkdLo6WeQkV6JcywRe2JPxxUspfKpFg9IpHm5HZesmhKq75SYMv:L36Gx3E8lk

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6f98fc84fd5c0d4faf449887236e859d_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1076-0-0x0000000005490000-0x0000000005506000-memory.dmp

    Filesize

    472KB

  • memory/1076-3-0x0000000000AB0000-0x0000000000AB1000-memory.dmp

    Filesize

    4KB