Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 03:09
Behavioral task
behavioral1
Sample
c924d1a82b482e6a605f4d8ac52285cc_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c924d1a82b482e6a605f4d8ac52285cc_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
c924d1a82b482e6a605f4d8ac52285cc_JaffaCakes118.pdf
-
Size
80KB
-
MD5
c924d1a82b482e6a605f4d8ac52285cc
-
SHA1
a1df271b76b44fda4a7164d0d4d816f348a14961
-
SHA256
b6c1676e1815b256dcc950b0bbe8e035d44e1072449fac79984fc013207f6ece
-
SHA512
1145283734ce119a0cbb10540107bf3f796b7c28621c666c51ac1d8a6fc6d12343a5f7ea6f36c12a2c9532c25204319e2a30ea7f5038ea5dc0e87a03d84e4c06
-
SSDEEP
1536:ugMb+8SzEyugy4ajULKWzQSGFZyZvn9ZfhUWeJPePqRYWapOtQNeFuoQ:nMb+8SqLoLK6IbE9XYeqRBtQNeFE
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1928 AcroRd32.exe 1928 AcroRd32.exe 1928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c924d1a82b482e6a605f4d8ac52285cc_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c590567c9b8d08f197335fcc6f6e4099
SHA137c69ae7d3ac32a18a229b7bcf253ee479430e3d
SHA25689f87796ec15f0ae4dba65ea03f428dea846783f7c6087592724fab4c18a8537
SHA51250ab09785caae64c96b324892fd47dba7cef8003f0b4ee58ab356e4eccc298e827964fe734ab18c0ca1440a03613464a0c657cbd16686d079cddb9c38c6a31c2