Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 07:21
Behavioral task
behavioral1
Sample
1c0b3c8a9888bb9118cfeba76f8d26a1_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1c0b3c8a9888bb9118cfeba76f8d26a1_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
1c0b3c8a9888bb9118cfeba76f8d26a1_JaffaCakes118.pdf
-
Size
80KB
-
MD5
1c0b3c8a9888bb9118cfeba76f8d26a1
-
SHA1
b4976bc67c0ac4d2c9e24096bf586e558fd4d65a
-
SHA256
cc4570806394f6a413a8e74c5b0dd5ac59f3383054bafcfc0ca8f76eb62d2c88
-
SHA512
d3185987d8012bede3938b722af6b993db69b7aeac53badbf4a8ab0c35d71c5bd33f43853e2676233fc83a4c8a8b0e8991b3b402cac641fad16542d7235ffaaf
-
SSDEEP
1536:ytRuYpGHrXu1AJ8eKdb/hjusCw6DwwOTSHzYECDaM91LO0kump/TWuI5np0E:kRuZHryAJcxuXZxO0EEC99UnP/9I5nx
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2932 AcroRd32.exe 2932 AcroRd32.exe 2932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c0b3c8a9888bb9118cfeba76f8d26a1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c02826090ff2d4c59a7033304e069027
SHA198d889ffcfd5e42725cf60f7adfb1fd08deab6e6
SHA25663728a9c731caa41fc8a489adcdc90183bdc2d7db34a75cac01b7c15829196b6
SHA512fcced77217f2dec4d84a4709b3252c547adbe99c296447a788a39df3447e728089c09a18418bd1e9cf68da6301e7d3efa5c0e931dada5cf4e6a0d74b43e6d034