Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
22-08-2024 09:12
General
-
Target
b7168370b2764b2b98b537dc8a701624_JaffaCakes118.pdf
-
Size
5KB
-
MD5
b7168370b2764b2b98b537dc8a701624
-
SHA1
4900855ac415416d429810b06702b951ec2612a0
-
SHA256
99dc42a77e3a2a2c8116499039123790258d42d6aaa422c2152629ade89c0b01
-
SHA512
08a036481e0d5796accccb5e0c6606f713183d32bf1268d308478bd2001d848bd4a4074c2f54f57287bca829e4d45b8e88a806cf0880bb628d8d98e2083844c9
-
SSDEEP
96:Xm7LjbeXCp0KinlHgwheSj1QNZqGxVorF0GJxVEaNEAwER3/D1:XeLniMQlHgExjkcHrF0udAE5D1
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b7168370b2764b2b98b537dc8a701624_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx