Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 21:17
Behavioral task
behavioral1
Sample
e86f58abcb599b5e419fa251c6989a12_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e86f58abcb599b5e419fa251c6989a12_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e86f58abcb599b5e419fa251c6989a12_JaffaCakes118.pdf
-
Size
92KB
-
MD5
e86f58abcb599b5e419fa251c6989a12
-
SHA1
f8fc485348648554366878139e341a11368e71c4
-
SHA256
61b23428d0ebae2c640d317c74fd612b1098f73061125b8e1cc854904f4a9cd7
-
SHA512
4d99144be52b6353fe4bdc67585cb58a71370100a93045f431bf54f084e4df99c48fffd1f8fc333b80195ddd4fca9b5242a1dd0de12a3d09a83264e6b114865d
-
SSDEEP
1536:xXA01+tWF4MNA/iXuJwVJWbkVw8DfR5cworM3NGWM9+AOsIQcAVsWcpOm8am9ezZ:tNbFAq49kS8D5StrMi+7sIQcAV3m8X9I
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2232 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2232 AcroRd32.exe 2232 AcroRd32.exe 2232 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e86f58abcb599b5e419fa251c6989a12_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53e88c28308a635f80afdbcf357bb46b0
SHA1e147218880d2ec0d48faebcc384d8729451b447f
SHA2560fe2aae017c25af9b234ec9aa14a8c9c39a7cb740400f2bcc03667c0cba10f2f
SHA51258614dc4ebba8177d4695d6b87c136f170283a854174965073060175fa0ef5d2375f21f87a0c9e45b309ced5bfaf0f35e21ffc00d20e828c5bd5ed4ae9eaa90b