Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/03/2024, 19:04
Behavioral task
behavioral1
Sample
2a4c018eaa81109f157cafd1bcbaa7ec_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a4c018eaa81109f157cafd1bcbaa7ec_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
2a4c018eaa81109f157cafd1bcbaa7ec_JaffaCakes118.pdf
-
Size
75KB
-
MD5
2a4c018eaa81109f157cafd1bcbaa7ec
-
SHA1
488cc9d042f010f5286148efa71de129fef00f12
-
SHA256
74daabbce910ccc1070d2f7e32f7acd0a6d63513ca97858ff684c7e9b40e1253
-
SHA512
bc5c1de8c0c354572b955a25b17222cb2767670c35b746aff435f1817fdf4b1ee51ea87a670f0112d7e273cf6413a1c593eaf8c5536c22ca5694d0eccbe84687
-
SSDEEP
1536:AOvOqhwuN1R6DrimIeSyyDf6LZp9mlnQhF9XWJMjE5QYBWapOtQlxP2T:2q51OWpnUZp9mlQL96MSQYOtQlxi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2412 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2412 AcroRd32.exe 2412 AcroRd32.exe 2412 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a4c018eaa81109f157cafd1bcbaa7ec_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f32efe75a0c51bd0ce1f81c9018c31b9
SHA10675c839ce18c22488235a51f2ee92109e897568
SHA2565733573e0f00665ae9516440a23e00b5e47b521d3e123785f9840d615d7b8db2
SHA51233ca8179dcc63987e85f93ede518a3168de46c6f512802637d2e3f1dad04582f4ee31935ce0c57459894f1c8652f910659fd49e237951f2243279f472f5a0a96