Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
17/03/2025, 00:46
General
-
Target
JaffaCakes118_7c448b1583519646a81db72ed9752d04.pdf
-
Size
7KB
-
MD5
7c448b1583519646a81db72ed9752d04
-
SHA1
100b707da3cb8a58620dcd9fbe2625952498f3af
-
SHA256
3584901ae8a675819e3f2a90f07a4eaa963d304b7f8cbbd1d0365c220cb1d0e2
-
SHA512
95735675c18a1c6ed3b2ae5225fa05a43ee18eb8a2227dd8e8c42d643cce36dda67e03f2f41fdeeadf4dc20db5ad6f293be7b3dbf688d62330dc828190f9a1af
-
SSDEEP
192:6EHHYEmoL7gVLHPQSv99rBh6hgm8uQou4wHAWyA:6EnYEmoYVLH4EBigm8uQou4wHAI
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7c448b1583519646a81db72ed9752d04.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx