Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/04/2024, 17:25
Behavioral task
behavioral1
Sample
be510455da40086062f24773907dbcfb_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
be510455da40086062f24773907dbcfb_JaffaCakes118.pdf
Resource
win10v2004-20231215-en
General
-
Target
be510455da40086062f24773907dbcfb_JaffaCakes118.pdf
-
Size
81KB
-
MD5
be510455da40086062f24773907dbcfb
-
SHA1
f63a0cefa45e3a64ab3e774b381360e545efa1c4
-
SHA256
195f7ab17c36f353526c37fb529fab0d7b2f7c07b1f15665ec26d8bb05fdfa30
-
SHA512
cfa657099f249a84be562a6af049be8fdc489fdc3ac369a1f8df0e5b226345920befbadce6d4e90f6c003636f7050bbf86c620c566fc7365ee72027d14a07423
-
SSDEEP
1536:B8AnqQVAS4UO3sHcsDP+k13hLV0+X2SQgLuW6pOu26WJ+bRhMHsxCLN7S:mA7ccHcsDx13Je+Bpru26FhMHTL4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be510455da40086062f24773907dbcfb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD543d2b2e1a5c2de5398443775bccf044d
SHA1b4411eef4873351898e3316f729f1a9e2a18e63b
SHA25633181b38350f45ce89f97a85f1ee2a3636fc6b79da0f5a8798651ee4533ecdd5
SHA51256f3d04e8d89533262f27a17df5c8c0fd3d0a955f5d4d6a533565cc5dc3b37880eedde3bd6ee6751c0188bcd3d3bc16a50c8cecf4757e5f4996e43affd5061ca