Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 04:48
Behavioral task
behavioral1
Sample
18cc74fd72dcd7ab1545e3be7082b516_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
18cc74fd72dcd7ab1545e3be7082b516_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
18cc74fd72dcd7ab1545e3be7082b516_JaffaCakes118.pdf
-
Size
83KB
-
MD5
18cc74fd72dcd7ab1545e3be7082b516
-
SHA1
6b340b53f93f39b04bfe636fe75a2fa18e77e98d
-
SHA256
2dcc80a3609dd65e70abdfcef8c4d8a239d3043d3b3cae7e255dc40317ad2a8d
-
SHA512
02b199cf1c198cb4da0ef97cb97e75ec868fcb81bdcb3d184e9e0c9e2d021f933778bf61b3c7b827af0c2fa2cdb2430be64151fc75e61eaafcc2bdec4499d3ef
-
SSDEEP
1536:gdRFxQsoVZymbhlguiDPtzLfez+uvYWHEWkNpOPZMPff4WV45+FURhTy6W:6FmlhhuRPpLmzB5H5PKfq5ugTm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2092 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2092 AcroRd32.exe 2092 AcroRd32.exe 2092 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\18cc74fd72dcd7ab1545e3be7082b516_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2092
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56bacc2b97b5e7cb644ce3aa6655386b0
SHA12de84a44aec96b8e0b1e4afeffe1d0eb993c15dc
SHA256d011bf3673c9c0f4cc2c128453e77e2aeacfc0db0649625cf8299656da56c250
SHA512b90481a3fb25cccde0e69f97932de2e12dee71e9358b4f80f23eec012ef56525e0e4417706360938d5eb16332eb7a813015926d09f470977ac28cdff405f475f