Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 02:25
Behavioral task
behavioral1
Sample
e8ffd93ac5fc1fd41d603ecead00e25c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e8ffd93ac5fc1fd41d603ecead00e25c_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e8ffd93ac5fc1fd41d603ecead00e25c_JaffaCakes118.pdf
-
Size
72KB
-
MD5
e8ffd93ac5fc1fd41d603ecead00e25c
-
SHA1
be5e0f624d5f2045d4a440e09c7649f24c5b1cbf
-
SHA256
887a0d891a5abf7aa3f4f648dd2e14a4ddef2c39f289b2f8676f346ea1dc2e57
-
SHA512
37ab4a98242c140a46ae6d820fb1030326c34a7b74905f5f1867cc9e8ebc83e4100237b1405799b14d0b0c62b0fe142380d222b03d4aa81ffa8ee8742ee2e8ef
-
SSDEEP
1536:zWBh1FDi1gd7zirtrk+UbGeq/Gq9RLpAjzXceWI0cAejSr43WspOR+rb:gDiuPirTUb2/GWLCXcNNeg4mRU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1908 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1908 AcroRd32.exe 1908 AcroRd32.exe 1908 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8ffd93ac5fc1fd41d603ecead00e25c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1908
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b495dc519963df426b4b62375268f84f
SHA116e3aa4f43430bc374116725784ec898946003a2
SHA2563c8d8f1c2c0ac96afcc2acba59378a9fd6547f3f04035ce305a89a29e1579264
SHA5127dcb6606d250fb718dd19eae1d265b66c037aeedbfffa97a34b334f35b391e3a733872e19a78150e6c8fc0aa275da9b039af0ea56abf3c96feefbc723eeffe28