Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
12/08/2024, 02:07
General
-
Target
8ce5acc5be3ef4aaf00032f1343ca4dd_JaffaCakes118.pdf
-
Size
12KB
-
MD5
8ce5acc5be3ef4aaf00032f1343ca4dd
-
SHA1
a97d595305acb0de787421dd7738946a33c62dbb
-
SHA256
bd207e47becac2d8749c935af66244e1875a47eaba747ff18886b8165b542e63
-
SHA512
6083b1dfef6f3d6fdc06ca23f220617ee36b831f678ba8153b15a97670307f0446f853ee748c9f5cee8624a4d9a04c97d3b30c360ce94152cd5c590e19352f21
-
SSDEEP
384:mLEMlLEMysd0A0+3aA1FGdTSVujNcL+8pRPFOF++:mgCgM3aATWSVujNcL+3
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8ce5acc5be3ef4aaf00032f1343ca4dd_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
472KB
-
Filesize
4KB