Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 18:19
Behavioral task
behavioral1
Sample
0cba4592d584e1971180f6ae90a805ee_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0cba4592d584e1971180f6ae90a805ee_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
0cba4592d584e1971180f6ae90a805ee_JaffaCakes118.pdf
-
Size
67KB
-
MD5
0cba4592d584e1971180f6ae90a805ee
-
SHA1
7d6a1e808aecbe5e234d31f63a072bc777a776c5
-
SHA256
fb80811a7dcc09e6797e2a244948a353d1476254dae372eb295516d8ea263efa
-
SHA512
d12fe12473f0a74be82c6611625f2d8ed7a34fefb3bbd5f4d803c4e94e51f02a14ccd6fdb5e20191befa51d11cdcd882887c4406e76542f5a19c042750397ef6
-
SSDEEP
1536:c4VlpHbDbxPxskbxIImRUGcwuYa4aT/W+dRKB8gkr1WapOtQ28pIP3:lnpHbtcTRUGSYjaTBRKB83qtQtp+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2748 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2748 AcroRd32.exe 2748 AcroRd32.exe 2748 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0cba4592d584e1971180f6ae90a805ee_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2748
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55782059ac31e6722e6a0ef03ec1e6fed
SHA17402cad9bdf0599bdda474524d9590780e155c58
SHA256b249de092edce3c7d57e3ca45acec751276e99d6b7bbd587e493f1175cb9f540
SHA512495fe46527e6c652b28b2181dad4116daa4792a19e5d488ef50f1c31c7f9a771790749d45e80f8a1950729993bcc78e331dee5fe58cb218ca00a571a6992b3fc