Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 02:34
Behavioral task
behavioral1
Sample
f27c94468c68c6889cb4fed8b9622d83_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f27c94468c68c6889cb4fed8b9622d83_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
f27c94468c68c6889cb4fed8b9622d83_JaffaCakes118.pdf
-
Size
69KB
-
MD5
f27c94468c68c6889cb4fed8b9622d83
-
SHA1
7fad7afee419873277ea7185ee8499fa1720b6f1
-
SHA256
780e617e765be0081575a819e746e42f6e9c97a26ccae1528b59828642030396
-
SHA512
e13c4680d925e87a983438034f3774d99d5872ce4c3ad96fb2cc290a6b144ec54d0d704b721a9830ed5372621c020f481a3e338b608e863f267349c4e2d72277
-
SSDEEP
1536:pc8/zKRnkYQnLluLwJmuR+EqYGcFGW8UhWspORGWtT1KJiOIR0sb:NACnBChYnf8UYR/T1EiOsb
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f27c94468c68c6889cb4fed8b9622d83_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD526e348410d3252757e030e82121cf612
SHA1ccd26378b77ffc567868463488db2f0bc1aebcdc
SHA256fe9be04e7b8a47a35d1e98b266a6452098d500d948068744f06de2db580e9e4d
SHA5120151d2f1cab2c739eb694d8815ea3d7b9f079fd17f3d514575fd4f58ec66e1e461653631b382c6785862fd295a98a366c4345268e3369e4f33d57c66eee539e2