Analysis

  • max time kernel
    122s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12/08/2024, 11:22

General

  • Target

    8e8cbec6cbeb6fd6f5f4eb01876b7c8e_JaffaCakes118.pdf

  • Size

    111KB

  • MD5

    8e8cbec6cbeb6fd6f5f4eb01876b7c8e

  • SHA1

    4bb4d0ec0ede988ed76767cb59ec0ad96f20c8ab

  • SHA256

    13a3afdc08d17e9f384e6fdce5a2d1be6cc069b652366838de8d4e04e56978d0

  • SHA512

    2223574d0ded29770541f59e4bdae1ce1eb123b928b990ceadc8f088b01d8ff9346bca1194cdfef0030ae7f6b6623987df269c6fe446b2bed03757d22078830d

  • SSDEEP

    768:DpWWZSVsV1YPveYmYGbLB/vbQNK775BoQ4mijVJipEhiD6T+bIxp0sO9PGVigGZw:i

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8e8cbec6cbeb6fd6f5f4eb01876b7c8e_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1708

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1708-0-0x0000000002B50000-0x0000000002BC6000-memory.dmp

          Filesize

          472KB

        • memory/1708-3-0x00000000012A0000-0x00000000012A1000-memory.dmp

          Filesize

          4KB