Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
05/04/2024, 14:42
Behavioral task
behavioral1
Sample
d69f07f10c254bdb57cc5f42fc73b909_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d69f07f10c254bdb57cc5f42fc73b909_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
d69f07f10c254bdb57cc5f42fc73b909_JaffaCakes118.pdf
-
Size
82KB
-
MD5
d69f07f10c254bdb57cc5f42fc73b909
-
SHA1
7398a130ec0be19d3b8d15f4e566c55279cddba7
-
SHA256
a46db11e2e0492002d9d9977d1090c186717c78e84345ae43e3a75a6e683c56e
-
SHA512
c32c3cdfbdb0ecc4abc81a12df75394176167aa0b5ccceeac7b34f652d47d538fd3d5dad0e9a9865a0864656be5249c248ae2c2087c52d3def5821bc9802befe
-
SSDEEP
1536:2nCzo66sToABlrTOnCiadBR8i+eW6pOu2RtJ7lWbUcCzorc9b1m1I:qCzoOTCC1bRxwu2Rf7/cCUrc9bX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2528 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2528 AcroRd32.exe 2528 AcroRd32.exe 2528 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d69f07f10c254bdb57cc5f42fc73b909_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2528
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD578c33597cdb0de0864b618fe69b5df5d
SHA146e478bd307a8fc19523df8a32ec946b0be917b4
SHA256fe8c9a6107f216d2613ab8013a4f9186bff84b9be42048c09eb6082458f5800c
SHA512a7a0f8afd4341c96b892e3ae21bd979ce8f011f5e6dc1b78af2156c1286b83992f5674a9547971de083d76eab94345d4aa43362139e1be017aaf5b08be53f9c5