Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 23:48
Behavioral task
behavioral1
Sample
c50923037348c787db78e36329e23f31_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c50923037348c787db78e36329e23f31_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c50923037348c787db78e36329e23f31_JaffaCakes118.pdf
-
Size
85KB
-
MD5
c50923037348c787db78e36329e23f31
-
SHA1
022eb0962ec9a4afca486309cb1d8a5ece22e87a
-
SHA256
9f94ca5b6a9cba1dd030cca8405cc07f258bcfc385ed90991a5019c2ad87bafe
-
SHA512
52d77e32b77b4c99133d03a7f05c98842cf7904019d94b6fb1c4eb2e08dc11e78739db328636ec20a47d751444c5d61fccd068159e7cdc7dee84008d87648c53
-
SSDEEP
1536:0r4lTa52UnaGx0dpcXSwS0sn488LBsK7BjwTtgu+WOpOwrKWkeubvaP0:cWW2BGO5b0y48Q6K7lwiuTwr4l
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2064 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2064 AcroRd32.exe 2064 AcroRd32.exe 2064 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c50923037348c787db78e36329e23f31_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2064
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cee9508504b9160fbb42f10a9a76a914
SHA1786bfe61990b675fc388b538a8a887f696ef5b6d
SHA256623ca48ae3cff0a10abf00954a6e07a04308c8d78007e4cd25a6878e60c8c80b
SHA51223db0b853de9582cb39092f6971c83873b82b669a266103dc87fbc7b5637d82d6cdaec7db2c21065223f26447f2694922e9d8c6c211f11aacee183493264efb6