Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 05:28

General

  • Target

    84f3920cce6b222b45987e472b218cad_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    84f3920cce6b222b45987e472b218cad

  • SHA1

    bfae4a1254c426e0f535d51a4b4f98a62d1f382f

  • SHA256

    f67e140b0172306a1306583e0c272555229165eb19854788aa79b6bacd107346

  • SHA512

    fbe5fbe14a6e38f0b7fa696acd55ba6f819acd3277f164fedbdfb53ac6a9d795801e50fdeb65c3c735ecc8684ebf685cd8f69f458bea1efb9624608f81a4c3ca

  • SSDEEP

    192:bONbedw+lJ5DI9ou8NpkBqjbYJ8tptr7S609MFM+ay+Fj7HHHJHgH9JGxHHHqeq8:bONbedw+lJ5nNarJY0IGweqOKe3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\84f3920cce6b222b45987e472b218cad_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:292

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/292-0-0x0000000003F10000-0x0000000003F86000-memory.dmp

          Filesize

          472KB