Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 21:20

General

  • Target

    0c7e929f4f0d125a61ef5f2d0b2349f3_JaffaCakes118.pdf

  • Size

    24KB

  • MD5

    0c7e929f4f0d125a61ef5f2d0b2349f3

  • SHA1

    0fa5c3500d58a02c65bb1d4a4714ab5937604927

  • SHA256

    88b82c53c7c2638c33cad767b80089a1db0f598c7813826186f7dcb7931dcbff

  • SHA512

    5c6b14308c73aa992ac1fa47986632420fe3330a1bb369af10b8251ea6fe4d6327e100b3c956079414113e2e6a8810c9443e6e2bdf2f1195f1ae31421d7fccf6

  • SSDEEP

    96:WEDsNyvV0c645vFB+OlybcxMFizBQo1MFizBQoC3KrOLJnVDceQj2KnSnZ1WjnY4:WysNAbl6yoy4YyMCNqDHwK/A49NP4X+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c7e929f4f0d125a61ef5f2d0b2349f3_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:2532

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/2532-0-0x0000000003D10000-0x0000000003D86000-memory.dmp

          Filesize

          472KB

        • memory/2532-3-0x00000000010C0000-0x00000000010C1000-memory.dmp

          Filesize

          4KB