Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 23:43
Behavioral task
behavioral1
Sample
f496801af1d09f8bbd688321a9563d26_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f496801af1d09f8bbd688321a9563d26_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f496801af1d09f8bbd688321a9563d26_JaffaCakes118.pdf
-
Size
47KB
-
MD5
f496801af1d09f8bbd688321a9563d26
-
SHA1
093d821454f79438805bce4df266ea6f1dbf57be
-
SHA256
d9f7cb2297502cec326feba94ad496b0cdb049749d980df72a417c4caf036894
-
SHA512
bdcb8e2d9661271ba7964aa597ee4b5ed18aae9b1c7893699f622c8aa7df3f1709d267f277a701544c00ac0efe22ecab66f1e6201f82ad2ba7b7b0d64836504f
-
SSDEEP
768:xcXBCaoavxccfiCl3+HbYft+l7Ms3eoFAOmoT0d7R1z0Ek:xcLjZczCq+tloFJsR1xk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2088 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe 2088 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f496801af1d09f8bbd688321a9563d26_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2088
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55a36b9a376f5c4c96e9bee2bbc54322d
SHA1a07136a640ddcde90c70181bbf95868bed3cdf90
SHA256d046d5b74de96715e0fc9fd6e9f1161218d830caf87d239fb6715a8d2eaeea0c
SHA512b4f2fa5170fea616b6de7705f0a1e50cc5ba2128158af5cf08979b2bcac9d12b0fc31d7c16cc4a527018cd6faafaa092e1990e5669a70a053057a017470fa406