Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    31/10/2024, 08:25

General

  • Target

    827437efd84f57c01003cd9954282ae5_JaffaCakes118.pdf

  • Size

    13KB

  • MD5

    827437efd84f57c01003cd9954282ae5

  • SHA1

    c88506f9cd40779e48581f08604afbf224229959

  • SHA256

    c86473a55c9821c25d9ac64249981d124c06aff03be08b4697714b5b7219d217

  • SHA512

    c947861968c36f1b237ee15f18841669dc5a86a5d605c38dcd6391605c86e20baf49639612a9bac63a77908d969bcd8898d6b6f2b2f87646cede0378d6b98ce7

  • SSDEEP

    384:6hzaNwAO9GiJlDmlAloSAhmbZ9/4Qi/60G7J8vKIs:ahZGirHAhmbZ9wQC6dJiKH

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\827437efd84f57c01003cd9954282ae5_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1304

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1304-0-0x00000000029E0000-0x0000000002A56000-memory.dmp

          Filesize

          472KB

        • memory/1304-3-0x0000000002540000-0x0000000002541000-memory.dmp

          Filesize

          4KB