Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 12:40
Behavioral task
behavioral1
Sample
05d75d076340f7c60a3e408fa8dca8c0_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
05d75d076340f7c60a3e408fa8dca8c0_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
05d75d076340f7c60a3e408fa8dca8c0_JaffaCakes118.pdf
-
Size
85KB
-
MD5
05d75d076340f7c60a3e408fa8dca8c0
-
SHA1
20583af391080c5eab99d8c61ac0fe6d49e1723c
-
SHA256
6eb99d408c9abb8ad23501e3b5bf3038552bc3110e58b24d50e1c2342a3676e5
-
SHA512
b33b15d0e0487843b13b120e5ac53022aa2bef5235e087356ac6110cb95aecf8380985fb874d2e3cdc4dd9bbfdf3a3ffcdd2ddb74641791672b9451e4ac47eb9
-
SSDEEP
1536:kp0CEjFMDi3xDEzN0sepKf6tS3n9qLJLPo4oW2N8MKVXw3ZWmpOShKg:o4MG3xwRCpKfn3nkNLDklKVXw36SD
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2888 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2888 AcroRd32.exe 2888 AcroRd32.exe 2888 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05d75d076340f7c60a3e408fa8dca8c0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2888
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a7960d8fb1b51845ccc39ef3edcfbae3
SHA1c1070de87c11933c11df4ca06e3ad907dceb1e1b
SHA25647b1b2a74954fcfa5391f8b6ed9edfa771f7f1b18552b8b980771a0a8cc57ea2
SHA512598ef0f81a965b5e56c3b7194bc19aacd227e4c6d3d84f1cc6241fa6a199cc2842d51c2ff1c6e0ef627213cdf69549dd3af004c46d95a6a3dd9a10ac347fb17a