Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 06:06
Behavioral task
behavioral1
Sample
1a80226c9aa414791d2cbbfa81f43075_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1a80226c9aa414791d2cbbfa81f43075_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1a80226c9aa414791d2cbbfa81f43075_JaffaCakes118.pdf
-
Size
83KB
-
MD5
1a80226c9aa414791d2cbbfa81f43075
-
SHA1
8914d7bbb988e3a9c814a2ca94f3efc9291ee360
-
SHA256
8056c272a78c1c508def382439dab0af9c6387af624d34ea7bf6b87b5a377113
-
SHA512
bf4f601c6f444900c83d4e957b0a889e6204fe84a5021a0b49b80f2d412ad0e5a9253eb810b306420c12138e06a8a5f9b414bf261286419cf8e1683983a09d85
-
SSDEEP
1536:dVNfa/yd//khP5PwWPMDMuF8AAXv5u8tGcPS8ZWbpONiW7td+TwTTyP:Rfaap/6P5Y0MQW8AARu8HPS8bNlzowTO
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2348 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2348 AcroRd32.exe 2348 AcroRd32.exe 2348 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a80226c9aa414791d2cbbfa81f43075_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2348
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c4d0646530c8ef9b7a913b8291e65d6f
SHA10ac8ed5e618adc1573673f7630521d2e2f4113a3
SHA256f1805db8a2166d770766a2831905c3957a6540f6c204cf25d92a518b6b87cb77
SHA512dd2231380c146836360c9d318c8a0645677b9ca8c643dd4c7a5b32de7bace14c425cc293a4600c73af8ccac10f17c6f810732559f9d91a58ea2ec1d82c2dd005