Analysis
-
max time kernel
135s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
04-12-2024 05:57
Static task
static1
Behavioral task
behavioral1
Sample
c125a25d42db279a7983c430494f3998_JaffaCakes118.cab
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c125a25d42db279a7983c430494f3998_JaffaCakes118.cab
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
Adobe Acrobat 9 Pro ExtendedFullActivated.exe
Resource
win7-20240729-en
Behavioral task
behavioral4
Sample
Adobe Acrobat 9 Pro ExtendedFullActivated.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
Serials Finder.exe
Resource
win7-20240903-en
General
-
Target
Adobe Acrobat 9 Pro ExtendedFullActivated.exe
-
Size
40KB
-
MD5
250d060a133b9c318561a1b6d3c694cf
-
SHA1
aee43024e6446208fe21ab516ad9e680234b6729
-
SHA256
2b10c0f3785ef16683677b9604f452e410669dfeb1de87cee1f467f18c2dc854
-
SHA512
ecff10efb888d9daa2c9dd4242e0d2a5e771d56f2b21bad77aaa803760bdd7624df16737508ccbfed6612d268705ef800a58d569728651e01e8bb12d08e5472b
-
SSDEEP
768:/FDYdHVd+2Fwi2sUxgBOIsvXWP/+8niVdSJ3S2q:/idHVSBaAIIS/+8niVdUq
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Adobe Acrobat 9 Pro ExtendedFullActivated.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1068 Adobe Acrobat 9 Pro ExtendedFullActivated.exe