Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
28/03/2024, 20:08
Behavioral task
behavioral1
Sample
0ef58be4a5e6698058c1bb50f395db2e_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
0ef58be4a5e6698058c1bb50f395db2e_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
0ef58be4a5e6698058c1bb50f395db2e_JaffaCakes118.pdf
-
Size
83KB
-
MD5
0ef58be4a5e6698058c1bb50f395db2e
-
SHA1
36f7d119a3576ba4028afa4a6eacd34969ea9d36
-
SHA256
cbe8c7dffce1261f3903f597c1a946df799bcc2d8fc496b36ab6dc4acf8b9523
-
SHA512
a81dc6579b145fc18fb4548d4e30c032ba09d4aef9756358604d8574cae2a48afb59fc401a432b3fea354402237f06725d881e578d001743dfa64ce6716a7896
-
SSDEEP
1536:q9NR4CUVOKZaEobxh3oig4OEHQO93k/Xe/kMWhUvAmJQ9ZlWGpOGxEpOO:K1iLZJE17HQO93kve/k1Zm2n6G+1
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 544 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 544 AcroRd32.exe 544 AcroRd32.exe 544 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ef58be4a5e6698058c1bb50f395db2e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:544
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5322cf9b9bab91e1e4f58a7fbfc641513
SHA1f7983d3dd13343ceded184246293a1d8a3ec77b6
SHA2562a39bf7d19cd585de137a9addb4d073c76905d5ca3ad182d9325941609da0f1c
SHA512a3f34259e769d2b656d8a9ae3813c4daa07d157c30e504ff07e1594cdfe6575a5454dccbb015b31c029d4eba0c1e614587918f6e310b908a985c5d8fd8ff4758