Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 22:47
Behavioral task
behavioral1
Sample
f21a106c432234a4792b92da6b0dff2f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f21a106c432234a4792b92da6b0dff2f_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f21a106c432234a4792b92da6b0dff2f_JaffaCakes118.pdf
-
Size
92KB
-
MD5
f21a106c432234a4792b92da6b0dff2f
-
SHA1
19b2392a1e4a52a0111069531fb955e50c803492
-
SHA256
02aaf30aeed01623e6a6d5887d6d7dacc72089f1d362c7e4bcfc6adb65a74546
-
SHA512
109e99fdc7c1b844b139cd4fbc9f6071d96bf589dece1dc2b95130b605278c14dd91972ef4401964800b64d75a7c81d0613cc72982c437a752feae347e467ca7
-
SSDEEP
1536:d8jkQGAUatCctcpzAM2xW+RVMDS1GiJjVWZg2pN1yEq80cfDWQew2Ny6okoRWUpM:1QGjaUmTxNaDSwsjVWZFNsVw2NhokoU/
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2948 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2948 AcroRd32.exe 2948 AcroRd32.exe 2948 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f21a106c432234a4792b92da6b0dff2f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2948
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e8f8f678a5f23690d28f7ad713154bfb
SHA13307c00b34a3fa9a787d5b149aa1232641852a7a
SHA2565d5c964f79369a3d26f56ac65cea572eb765bec3a4f665fbc6afce3aeda3cc94
SHA5128c705608a763d0a0eac0a386862d85736a567da9ad892f746ba0fd47326253c653602a10866f4b54671516fd70961b2198749dc2c11374bfeb2d73f403257c85