Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
13/10/2024, 10:55
General
-
Target
3f73b7757eac3126099f8bd763bf5324_JaffaCakes118.pdf
-
Size
87KB
-
MD5
3f73b7757eac3126099f8bd763bf5324
-
SHA1
29685460ec2ef90ac5dca764f5ab5e82ed96a46c
-
SHA256
b3e06399fb83e2c6700f40f9b8d9f4abeb9befcf989efc972eb58e353e8aac90
-
SHA512
080653370ccd3ec8d983745a0a88df0c56c06a7da1f5f6f238835378a4fc65ed2426c4657187d143d78f68fba42782aaecfcc4d2d9b94880d2ed095b4dfa1942
-
SSDEEP
1536:WWkL6WHScNWwzGR1XBcyCVfFThXwcYTOmY0BWIl+8lfE/ayWUwAW8pO+QRK:2LjHS4GHXBcvVtTWTTOmNK8fEay2r+7
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3f73b7757eac3126099f8bd763bf5324_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx