Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/04/2024, 09:18
Behavioral task
behavioral1
Sample
f32b9ce1725d08d495fc0ff20ac05bcb_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f32b9ce1725d08d495fc0ff20ac05bcb_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
f32b9ce1725d08d495fc0ff20ac05bcb_JaffaCakes118.pdf
-
Size
75KB
-
MD5
f32b9ce1725d08d495fc0ff20ac05bcb
-
SHA1
362783b891ce113dd95a46574205b6f2d16b474f
-
SHA256
e3f79955f8e8d7b05b85a0ee90afaa03f455fc769d833b6d3c86c8ee4702b71b
-
SHA512
29da50ef81661c59b49b164416f0e9e30f36384bb5d77bd8f56e78c6d9a94b208eb908251122f2e2d71587d4e7db1ed3bbb83e0fd5ca678e98c601bbff052865
-
SSDEEP
1536:4IkhrGHjGZPaMWbhqJ0qGET4uXbl1ToGfTRk0lfS8iWmpOpNWs2aaSKYzlwgn:ElZifbZXE5b9H1S8Hp92aaSKcP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3008 AcroRd32.exe 3008 AcroRd32.exe 3008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f32b9ce1725d08d495fc0ff20ac05bcb_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5490c6878f7b33f9c723ed6686e4a9353
SHA11449da46f47f37eb8b8641b555936713fbd43a84
SHA25602d0d078c84276eb5d6f0b095355d0fad5fdd976a986ac060f65daa1f04b9928
SHA512ae5d11ebe285634fc91107bb72ca3f018f3183c0106a4baf55d1ecdf75c21375ae10c30abef39096d3b878cf23b694b912b0a8270d28a09a957d7659af6f9a2d