Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 02:04
Behavioral task
behavioral1
Sample
e8f629ae1bab5d65c3ca3d80f3693e88_JaffaCakes118.pdf
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
e8f629ae1bab5d65c3ca3d80f3693e88_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e8f629ae1bab5d65c3ca3d80f3693e88_JaffaCakes118.pdf
-
Size
78KB
-
MD5
e8f629ae1bab5d65c3ca3d80f3693e88
-
SHA1
fe82564d39ba5359c724269597957129c7448a8b
-
SHA256
f4131b9f6a1bf6ebc78087085b9bd1786a2fa648ceedf09ff6e8f2e0572d148d
-
SHA512
40759c8fcb6ac0d8b8602d535f4283fd59d4e866424e1f3cc862258261923583efcc200117185674e00f42ede170e6f7f8241abb1d422c505c384336e2c4d644
-
SSDEEP
1536:vfVa16rWaXY2d4A7hsx2dBIrahoGB4IllddXPWjWtkzeScWW6pOu2pUywPCtz:nVaJahd4AdsoLKpQ4IlBXPjTu2pUywP+
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1068 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1068 AcroRd32.exe 1068 AcroRd32.exe 1068 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8f629ae1bab5d65c3ca3d80f3693e88_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1068
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ceb9f5cada206d11bf72962c7ec20232
SHA1795b72a8afb745232798d66f19e6b5f4c7e17cf4
SHA25678863a0759890b4c3a4f5a6ecc09287c6bbb8e8d0381e5b41b3725a5672363a1
SHA512c55fbacd65f5e843d15cdce9c0f3c0d818f5469aaf5e4dae7c2ed066d543cfc02c7898dbd5e89419e231352aa350bc6896fffb53ff8333d057990b9e6914bc5b