Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 08:23
Behavioral task
behavioral1
Sample
0144f09536aa67f70c7cf98b1b2fadbd_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0144f09536aa67f70c7cf98b1b2fadbd_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0144f09536aa67f70c7cf98b1b2fadbd_JaffaCakes118.pdf
-
Size
69KB
-
MD5
0144f09536aa67f70c7cf98b1b2fadbd
-
SHA1
5c8603a2d6b4be47703b48aa7ab8d878bfd4c058
-
SHA256
26112feb5ac1de1c4fdf42c91b0d80e02675610e170d94e58c10af2f238914b1
-
SHA512
e42b2dce345ce0c4a3acdec8c7f420db9a7413ad2e085b2599176ae6bc80107d0df14e9eb635d5a531723d1db2dae59877a5c9532ffefbf2d2e4d9780179a066
-
SSDEEP
1536:b/QuKHJYKJvSylK2hQmG92TckHgkdzGWkNpOPaWUsp90LTWcmz:DQuWlvUmG9MAWHPysp9uTM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0144f09536aa67f70c7cf98b1b2fadbd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f73284e9c3d7092248314d7488eea5fc
SHA14251b924e8dff5f98a38b37db13baee3bb77306d
SHA256417cc1edd419b3a2c0af4f4e795c64bc1a1e83144ea4eff3f5660fd8e7e4d1c6
SHA512495abaed0ab66b6fc4834a158ee20bc41bbae793a8113a0433bcf44c2520ec89f6f10e0ca7e8001de2279f0d79b81ada6e0a484b80f23b264d227424f55c3fc2