Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    02-08-2024 00:48

General

  • Target

    826551a1cace9125665a7e74c94b5404_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    826551a1cace9125665a7e74c94b5404

  • SHA1

    e891e62ce03e1f1dc39dea32ce5e17384cf987cd

  • SHA256

    cbf9e496be436209a1b378e81be3d88fc486ea7c422b994e60040235e74512cc

  • SHA512

    01fd1b5cc3b05b34851e0191a98e11c8ed8c3cb74ea11fe06f4d7ea2e04ba8fd5f42342cb146dfc38a424dcb1ca572a30b790cbd5a5cf2f32cae5512d02da82e

  • SSDEEP

    96:WEDsNyfV0aWJ5vFB+OFnVQUPpT5GXClzwYOWh5uslbzWgnR3rW/83mi94XBaILRS:WysN0AFyapTtlEYOaWgJSyYIAM9NP4F+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\826551a1cace9125665a7e74c94b5404_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2164-0-0x00000000036F0000-0x0000000003766000-memory.dmp

    Filesize

    472KB

  • memory/2164-3-0x0000000002030000-0x0000000002031000-memory.dmp

    Filesize

    4KB