Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 00:59
Behavioral task
behavioral1
Sample
1480e4f70af1a8c655f82124a93cc08a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1480e4f70af1a8c655f82124a93cc08a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1480e4f70af1a8c655f82124a93cc08a_JaffaCakes118.pdf
-
Size
80KB
-
MD5
1480e4f70af1a8c655f82124a93cc08a
-
SHA1
698d9f7905f66f7ab1d80a2982c8742fad2176aa
-
SHA256
a53ec1b1776652e8a695c73d2727256dc6f2cc1dc21e7a3e99ad61dd8752502f
-
SHA512
4b11ea5481161c98290d9502077913e1e705d445b78d68678eea1081b5926cebe5d61a7bd59dc4d35261ee243ee19ffb823a6aa4064141618d6930d188364647
-
SSDEEP
1536:zISrWThE149bPI29bhwPusoG7BdTT8FPlmAwgVLWyOsSP92WapOtQGhllQC37p:MGwhn9bIAbqPfoITT2sAJAs89LtQWHL9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1948 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1948 AcroRd32.exe 1948 AcroRd32.exe 1948 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1480e4f70af1a8c655f82124a93cc08a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1948
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD517a71940ee648404c0c8b2242113d986
SHA14d3297ced1cbd5a32543ef4af21165409bf9bafa
SHA2568c64c2694718666673a224dfcc8bef249654713b86bac33ba5274dc030272ef0
SHA51213f805fd816248b561653f329b7fb04db9d3b21d83b408f189cc0db621450747252c3f440285326a9d026ce6329ddc756faf47029431bc3d66ecb99bb71338a4