Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 16:44
Behavioral task
behavioral1
Sample
273d67623907cbd8099ce4210b57db6a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
273d67623907cbd8099ce4210b57db6a_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
273d67623907cbd8099ce4210b57db6a_JaffaCakes118.pdf
-
Size
81KB
-
MD5
273d67623907cbd8099ce4210b57db6a
-
SHA1
035b86bab75a6d17a9ce56a7f8cccdf7a7a2ca51
-
SHA256
46e8a34be8cc2dd2d24449fde0c76568a32362937135ca2017b3d7e9076fbd7b
-
SHA512
fa9235b808ff5ab9ec827061ac4343b8407239c847c6fb132881fe95e350bd890d5e58a73dd86bb47f7c45618e506cb52940240f9f3c3415fb565d04ebd3be7b
-
SSDEEP
1536:lVG3ZkMBeSxVhqOrHg8b2FdxwLF6qFPWVLJmzcW6GwWQpOC/QlB23:mZdBeLOrAk2Fdx6UQ4JmZ6GfC8I
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2756 AcroRd32.exe 2756 AcroRd32.exe 2756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\273d67623907cbd8099ce4210b57db6a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52696eba56211102335a9ab8544dcc5c2
SHA14274a7e7082294e0293d436fdad6ec77ab3e34f5
SHA256bcad1068eee83eef8d3bc05423cd60035fd35d75afeb4ad7806cf5d18f787c22
SHA51202af54e7000483b4521dcb16bfc238bdfcf3b24865a80061dee818152d9b266bc252ab7f27fd74a31734b29f62c4f7974890510a582c04b77ab21b04ca0bbe7e