Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 07:29

General

  • Target

    098b2d79735604b0b6985ea76fbac5a5_JaffaCakes118.pdf

  • Size

    13KB

  • MD5

    098b2d79735604b0b6985ea76fbac5a5

  • SHA1

    299cf6573fe5e6cc1e11cde85447128240b0b09c

  • SHA256

    c4b864e32c0ffd1ced26f3a9fc2d0f1bf47921b3c6449081e5013a780aecb931

  • SHA512

    d587fd183d9cf8cc6c64e3b918f22ced9febec11200300b142826d2156371727740ff10af396748ffa23f689b8bb0e48810a97b34bf86cf6a06d6e251072924d

  • SSDEEP

    384:6hzaNwAO9GiJlDmlAloSAhmbZ9/PQi/60G7J8vKIs:ahZGirHAhmbZ9XQC6dJiKH

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\098b2d79735604b0b6985ea76fbac5a5_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2504-1-0x0000000002E80000-0x0000000002EF6000-memory.dmp

    Filesize

    472KB

  • memory/2504-3-0x0000000000720000-0x0000000000721000-memory.dmp

    Filesize

    4KB