Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 23:54
Behavioral task
behavioral1
Sample
132332919f1f396246d8fcd070a86e9d_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
132332919f1f396246d8fcd070a86e9d_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
132332919f1f396246d8fcd070a86e9d_JaffaCakes118.pdf
-
Size
91KB
-
MD5
132332919f1f396246d8fcd070a86e9d
-
SHA1
d6eabc3a185ec3e889878d6acc4185a5d93d4544
-
SHA256
a80972941659b604fbfa81eb4f249e0583ba42d8ef3c81c5b7b37a257bfb5c54
-
SHA512
6b89a7386be6372ac9e95ff23a50dc2e03a4027222644ef7a668bf2967254aa631bdce4c95e1403260a5087fbe680d9ad9cfcbba027cdc0ddd0d4e65b198adff
-
SSDEEP
1536:UlXscCAw2EDGGNW9TkvYzxLh7AiwAeneAAw0c25LjW9RfVWvC/cY9eGq1jLZWGpU:qccCAYDGJxDKAen8w0cMMRf6AKGq1jLY
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1732 AcroRd32.exe 1732 AcroRd32.exe 1732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\132332919f1f396246d8fcd070a86e9d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58f3c6528ba8b8ec42fd954fd02ebe259
SHA192fef97b83b9c72863dbbba6cb4ab2faa72e7593
SHA256f1fdfdfba238f93517872711eb342b48b957c44d8e13fdf311455526a4a0067c
SHA5125a8a1033f08eadc55fcddfdc5916b5af4e360a0efedd9962d31ebe0fcb635a1e3635436977a71bcf51eea03e65800c000b623990fa1bc171da7ee3b8afb6d410