Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 05:52
Behavioral task
behavioral1
Sample
f2d37612f3f90a60031125d8ce0dadaf_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f2d37612f3f90a60031125d8ce0dadaf_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f2d37612f3f90a60031125d8ce0dadaf_JaffaCakes118.pdf
-
Size
70KB
-
MD5
f2d37612f3f90a60031125d8ce0dadaf
-
SHA1
1043734981e851d8f95de6401428491189f2e5a6
-
SHA256
3aabd0aa7df56a68255e8a3d402c1b66508c22448684ae0173aa9ffaa1dfe778
-
SHA512
6fc038448931c52af88b7583fcaf79fab95357864b2d2a6b66fa8671d47ae7cc0a18d76bb9662f199e94262d6c4c46100cdc117d05b6562a4493a5274d08f713
-
SSDEEP
1536:vqPBbeOI2IhxI4V9OwSuJSsh+f3bjTmlVHV05TEG/g6gUiL:CEOGhxIq7SuJjhq6lhVoEyRgF
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2092 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2092 AcroRd32.exe 2092 AcroRd32.exe 2092 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2d37612f3f90a60031125d8ce0dadaf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2092
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b3dfbe650636aa9e0c007ded2976860f
SHA1f3dd3d28c9203a6bbd8c357060c43a0ba2784df4
SHA2561d721d430a5c93af42bd92f5aa5c1638730a8ad5c4fb9e22430b791aca6af499
SHA512119811818353a18598aca443d368961f9787b016b6ca8f1378cf656de69877dd748ec19a962f9eb04824c53c5c6070cbdafa7a785c94a67fd778937e25e059da