Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 22:14
Behavioral task
behavioral1
Sample
e88b1001ff9551c1fd736ff571fbb939_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e88b1001ff9551c1fd736ff571fbb939_JaffaCakes118.pdf
Resource
win10v2004-20240319-en
General
-
Target
e88b1001ff9551c1fd736ff571fbb939_JaffaCakes118.pdf
-
Size
81KB
-
MD5
e88b1001ff9551c1fd736ff571fbb939
-
SHA1
ecd99e916b1a520bda2a3f6ee6189545d9645fa6
-
SHA256
0d1ac499992fe71c0c933992a73f56ef4398094a38586638396af26a73db60ea
-
SHA512
7cf2d16c70f9168b77ac815323f7bff3274a8a9cece4db58260d359eecdf386a720daaefffe87ee61e88342ea9bc7530416295f9a94d0ee1d25baebbfbd0bb7b
-
SSDEEP
1536:M9IRhaS+N+f5PsE8SCvAxirPKPlMJYE2lA+WkNpOPaW0jBi7sceF/XBMk:phl+N+eE8oxiz6lew4PfscW/Xp
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2236 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2236 AcroRd32.exe 2236 AcroRd32.exe 2236 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e88b1001ff9551c1fd736ff571fbb939_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2236
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD503dc2b668d1dbfb72d92e3893a557534
SHA12b8f9cc46f1ec2faecd4c662c3e3d557f04ab164
SHA2562698fa1b021413f3097c67cfc1b4d545f91763014d0da1a01ef7ce1fbc436b81
SHA512318bd6d8d2a49e0efecb9f1e0aae8e392140931ca184df96f1307eb1fb8e3b1a91620c04f9aec4d4787c1c2d51ce3f21a569fe1de0f1facde96e1a6294622f52