Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 22:13
Behavioral task
behavioral1
Sample
e88ac2b8086102c01e7f1f7f2530b072_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e88ac2b8086102c01e7f1f7f2530b072_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e88ac2b8086102c01e7f1f7f2530b072_JaffaCakes118.pdf
-
Size
94KB
-
MD5
e88ac2b8086102c01e7f1f7f2530b072
-
SHA1
d8fa3dcd8ce0dce3dae0dbd7717061f613948f47
-
SHA256
24a15d1805dab0dbd1e55b1da6516449263dd4239c902757be430493eb5d0c10
-
SHA512
dc24779809b5a0203159731b21ab08984c158bd27111df2f4a18ecadbc6a811b04ffbb316dd31e221f2f2287bfa0651523b1c72a3120306bb0bcedecfe7418f4
-
SSDEEP
1536:1+XgTO9PwdpkXH0ycKjpuyac6oM1RRyMl+4HHBvhHa6dGL8CcZWtaCfP42WxApO1:4gYPspuH0ytuya5omzVl+4nfJEL8tY/I
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2184 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2184 AcroRd32.exe 2184 AcroRd32.exe 2184 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e88ac2b8086102c01e7f1f7f2530b072_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2184
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55aabe5220beb45a3354db89ba252e062
SHA13ae8521e124798da6f2d3271abbe3de7b8d37fef
SHA256f87d12896778e587caba6c7a9eb58a6acb33185b28018ddb3d8805cdec25ed4d
SHA5120aee5b4f4f70990a9dfb5dc2216c189bf009b228080f0674be5d0acb28d9321e41ef75740f84f70149d2f8dfbb149d5d40f23a532b8ec3fbf2c61a7bf72a38ce