Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 11:12

General

  • Target

    95dc65d10040d196e8c5fbe5e2d1435a_JaffaCakes118.pdf

  • Size

    111KB

  • MD5

    95dc65d10040d196e8c5fbe5e2d1435a

  • SHA1

    a025dbedf8edaefee15b58c8ba1e2437ff924a6d

  • SHA256

    862f97ea1ad44183beb86dc285cc42ced3d3aee6e86c926011bc153402733834

  • SHA512

    2ead5b81fae5b5d4ca831666a4a103183bf230e7686c1ee51224e86de26d73c0b31eda75a827b4c96b717d307339e51c0a06b1e5a09070c53d6fbe2ec56b14b3

  • SSDEEP

    768:ZxoWZSVsV1YPveYmYGbLB/vbQNK775BoQ4mijVJipEhiD6T+bIxp0sO9PGVigGZw:K

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\95dc65d10040d196e8c5fbe5e2d1435a_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2120

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2120-1-0x0000000003D10000-0x0000000003D86000-memory.dmp

          Filesize

          472KB

        • memory/2120-3-0x0000000000F60000-0x0000000000F61000-memory.dmp

          Filesize

          4KB