Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 23:26
Behavioral task
behavioral1
Sample
c49dd26864a6515f9f9f08d9f600038e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c49dd26864a6515f9f9f08d9f600038e_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c49dd26864a6515f9f9f08d9f600038e_JaffaCakes118.pdf
-
Size
102KB
-
MD5
c49dd26864a6515f9f9f08d9f600038e
-
SHA1
3cae1cabf03669e5081ce2844c1e10e9928cb29a
-
SHA256
b5d1633392a3500d6865550f8bf34e05bbf511009fbb22312b1d48350c04259e
-
SHA512
de48739cfae2095f72faf6a2e36503eb88d4c6ce616ce9773c910a86f56a72337774c4f1e2effd42bea0c5090026c605241b7a67b238a6f6490c673cbc4aecc8
-
SSDEEP
1536:00T8YFEIHYc4PPKjumc08qsLDP39mmRBS92smIFCgti5m1zGynb4Wx1n4H0iW8pP:BTvYxmnPsLfRBS92s6gtic16OReH0N+r
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2256 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2256 AcroRd32.exe 2256 AcroRd32.exe 2256 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c49dd26864a6515f9f9f08d9f600038e_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2256
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5de478c713597b1541e2e1324694c8e0d
SHA101f28a2f859b8fbcbc6feb186f76402129a7558f
SHA2569bc8dfceef6140653e97aa4366096c1657010c74453f389bd7882c353f5b48ef
SHA512c7d8185bf535ba31c1a16fb1989c3896001687a1e868490b997898c5b3d22622ec3894a3fff4e0584278afd8682b3b7504807777f21e261527f4d94c3cac27e5