Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06-09-2024 16:41

General

  • Target

    cffd057fbdfdd2f4c1cb4ca39f16d37c_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    cffd057fbdfdd2f4c1cb4ca39f16d37c

  • SHA1

    cff087dd2467df0da6f1a7f2d9c60af0f096190c

  • SHA256

    14231c6720226a5f45ec43413475b5c5fbfcdb12921b28c762423f73cf5a49f4

  • SHA512

    6f1d88763ec8bec5ec6d5bd11b55282e23b2793551e635958138a5c0a8d1a58443d2ddd18f771219976e27a493611c19c2ec0ce0c3babea743672444f0a54603

  • SSDEEP

    1536:3VwnpynBGA7djF4VndyE5lNO3ikvw2WwpOSfIfJZW7euD6/yoIy:eGz0fvNOyf5SAfJJj/yq

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cffd057fbdfdd2f4c1cb4ca39f16d37c_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1171c9bde0dac751bac3164d15b2aa53

    SHA1

    4ac1a07a35e8dcd02220a800a69d9f111f6ef0cc

    SHA256

    cef8545c799172290808702dc7731f923f84bc95e7242830b972060a7ed9a0eb

    SHA512

    b5093bde211f27c205012b8bb445ee4968492b3da968fff07d73d2c5d24beed6d6ae28fa28e55a8fbecb43cb56ea270f77eeee61fb6d2f0cc5fa8ff2b73d20df