Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
06/04/2024, 08:01
Behavioral task
behavioral1
Sample
df880c52015f48f445d86f15482db117_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df880c52015f48f445d86f15482db117_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
df880c52015f48f445d86f15482db117_JaffaCakes118.pdf
-
Size
81KB
-
MD5
df880c52015f48f445d86f15482db117
-
SHA1
0b4e6c52665421ced164f3cffaf6f7031a5c6da4
-
SHA256
2e131d8fc0a52f87d068d6c0f17e29f268ec4778205fc7eae2ddba425eee41c8
-
SHA512
535d905ee65dfc264362b5575b924feb513b3393f6f44c008c369c2c6ac48faf0887a38d03f64c8172755bffa54c09c560587699ac7dd65d5cac87cdd598c080
-
SSDEEP
1536:sUkD/clTJOzXwsUjeceYjDlC3ZxT8Zq9zUj+iU7Wh2FO6XaW6pOu2Bg0C6wp:rkD/ccBFfuoxT8ZqdQ+O2FO6Xnu2O0Cp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df880c52015f48f445d86f15482db117_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD580c941cda2c7d79b97b90f95a264bf77
SHA1cc73a38b91f26b32fe68e746ae8aaff8d5b4ab82
SHA25655e820fe320e197bc5240b62c4077db7daf3e08ed18f714d486f3aa67b5509f8
SHA51293c3646febdf5954ff7a6a0851acaa63a54213d2bed76293fbe97809f2b1e9c09ad46b534fb7142134d4eef3ab5748bf84d2791dff7aa48373bd74b862ba3766