Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06/10/2024, 13:17
General
-
Target
183fafdf28e758395e5c81bb4d668190_JaffaCakes118.pdf
-
Size
78KB
-
MD5
183fafdf28e758395e5c81bb4d668190
-
SHA1
7bb1ba44cf71c37522fa42754b3eca2c57f1b3ee
-
SHA256
f4ecd2aebfca7b46da587e29a04b863866b2b48311691b400aa338403c9ac410
-
SHA512
09b96f4b5d429903b8a7f3823514b9ebf089ef60657c6f8de6f6a615247ea3ecc6bd06137dd10e0686a384c6d1a1d74f8caa7a52b422481a2c29ea86a307a271
-
SSDEEP
1536:m3KZMoO6FVb4+gVhpcdtk+6FWBgb5XvyWSZW4p19kXMmTWxApOGteiLKo:WoBFVbR4hWtkwOBvyp48m83GYu
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\183fafdf28e758395e5c81bb4d668190_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx