Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18/09/2024, 19:08

General

  • Target

    e9cb3b3fa1a30b4253aec7d9a16afaed_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    e9cb3b3fa1a30b4253aec7d9a16afaed

  • SHA1

    a8b2ab87d32425e14d5a4927e7c07309002ec3b5

  • SHA256

    46b248e1397a5f5a00ebfc41c0472103dac1ccbe5ffe98638d1d1f8c498a0717

  • SHA512

    a09c5c7a9484b9110a11cc4caf8310bbb1c6cfa3aeef1727d4f6f7f5c7ecdaeb2ad484a45e60a23b56d1ab4bbf9c5bd6b12492b74949b641cbe5acf419c17ea8

  • SSDEEP

    768:Dg/gV/uVKWTjDFt7VSPW0+QMEYTAIFpSqC3:FupQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9cb3b3fa1a30b4253aec7d9a16afaed_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2716

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2716-0-0x0000000002CE0000-0x0000000002D56000-memory.dmp

    Filesize

    472KB

  • memory/2716-3-0x0000000000D10000-0x0000000000D11000-memory.dmp

    Filesize

    4KB