Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
09/04/2024, 12:27
Behavioral task
behavioral1
Sample
e9fd3b6c49e0b42ca6d33aa759e1dde3_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e9fd3b6c49e0b42ca6d33aa759e1dde3_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e9fd3b6c49e0b42ca6d33aa759e1dde3_JaffaCakes118.pdf
-
Size
78KB
-
MD5
e9fd3b6c49e0b42ca6d33aa759e1dde3
-
SHA1
c2de870d2218d5b74e7614a74972d64471b80ec9
-
SHA256
532b135e23cf04937b3eeb2948890e9a0a0149f347a1bed16c94d1ec44728853
-
SHA512
5140276b69afc95c13014d0ca38050253229652914b157e711be154dfcf210854e556d15f36559c7319f46cbe2012cfe1c34d0448023d7e387a56f8aa72ef7e9
-
SSDEEP
768:RG8Q5fAg19hLxnNyJju7ppCSIV/tD+sAFuxb/hceTskObeW66xX+x3P03rhmQn3Z:RGRHLl/W/tasbOY0X+x3g3tB9/vKJnuP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9fd3b6c49e0b42ca6d33aa759e1dde3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d658b1fc1ab01768188551e196b3ff1e
SHA1483e4226420b9b15294c54165f4b522fffbaa43b
SHA2560ab1d27fc329fdba0e52865bc0cc0d896596dee4ee350b4b8f3ad92e1e6ac58a
SHA51243c29f70a15bfba4042e002f8e2bb97e4fd196137e117aad121b81e742ce6739c44ada01b446eea68feeabc279b0612bc7c37061bedc0c294a37f7c51aa4b1b1