Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 01:53
Behavioral task
behavioral1
Sample
1596ccd4390760c3b3936ad40fbca0b5_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
1596ccd4390760c3b3936ad40fbca0b5_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1596ccd4390760c3b3936ad40fbca0b5_JaffaCakes118.pdf
-
Size
78KB
-
MD5
1596ccd4390760c3b3936ad40fbca0b5
-
SHA1
3e2222c76911596d2f6d07e5165f29ec0acfe3af
-
SHA256
2999f87f3af46e2c0d07706887b0b38d988c73da55db5935e63807fba9356d22
-
SHA512
a2fc074816c6b7611bd02674bfde2d51f5e063a60a32b6bf24527c22a9aef28de0200e1ed8db08037c9b6618c83428415c79910d6cf8b495d6336114df18cd58
-
SSDEEP
1536:CLcKi0DpSzjPLDRhIG+t3ivXifTaFmU8Zt/J2YuW995FsETW6pOu2K41eqVAm:L09SvTcty/MpZt/JJD95F7Yu2KYeqX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2056 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2056 AcroRd32.exe 2056 AcroRd32.exe 2056 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1596ccd4390760c3b3936ad40fbca0b5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2056
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55f5f1f570162f7b67d43b9782634c4a2
SHA17a7d4eee8041836e8ef62b8821f306a717349c49
SHA2565b99cfbfa26df477ec66d27aa13572893e4b0ec50295f055c26c7a328dcd50a5
SHA51299566163a2f5c86ba6d28f20e5a1fc3d2c86cf89654898384b733e8ec025265086fe83ca5dba0595f6b134542898e344880aedb77b00e23ace1d2d9daa82842f