Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
05/10/2024, 06:03
General
-
Target
1673f0dd9c8984bb04e936a6811228c6_JaffaCakes118.pdf
-
Size
13KB
-
MD5
1673f0dd9c8984bb04e936a6811228c6
-
SHA1
188fbf8cd10216702a7b6b0d0269b2c75c3064e9
-
SHA256
a93207206f17363a76d139730bfed9c1c68b568b5e3dd675610541449831d7ce
-
SHA512
32f52076aa1245b832fbdd938e58f7cad5826807eccddf17f7294d9b54f0187df8cad65f3571152a92def2cbf0f4c573992db863d637e99655ed253677843922
-
SSDEEP
384:6hzaNwAO9GiJlDmlAloSAhmbZ9/XQi/60G7J8vKIs:ahZGirHAhmbZ9vQC6dJiKH
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1673f0dd9c8984bb04e936a6811228c6_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
472KB
-
Filesize
4KB