Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 11:56
Behavioral task
behavioral1
Sample
f5b6530e328cf751eaa3d40a802a1cd9_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f5b6530e328cf751eaa3d40a802a1cd9_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f5b6530e328cf751eaa3d40a802a1cd9_JaffaCakes118.pdf
-
Size
82KB
-
MD5
f5b6530e328cf751eaa3d40a802a1cd9
-
SHA1
6d64a1d690fff29d819650d83aff3ccc4891e3e3
-
SHA256
a9cccf426e16aaa31b52a300f7bbc00f5c3316a99649135d0c1460638d9403af
-
SHA512
fb2c21763d566cc491f9efc22ae7c4bd49cc80cd66b1bf1ced8d6a33f1740135201f1c433507086e80467b69b103f8c251577c37402790a2e39d9de97731e529
-
SSDEEP
1536:Rix26iCM4vFw19QLByYEJCdYKSupCmWQpOCoW7Y4QXqc4JO1bCZ1Qng:sA5CzWbQoJJgYKSWCZCqqVc1b6B
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2412 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2412 AcroRd32.exe 2412 AcroRd32.exe 2412 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5b6530e328cf751eaa3d40a802a1cd9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51b47e275ad283ba4be92338f7eec263b
SHA10be834dcc904073eadf2a481acb2df4175de2651
SHA256b3155e742d7a655cea24476e9b6e7cb8d1970ede6fc4dd38e3624f27d9ea9149
SHA512055749bb1280ba7aac441b6c0cd8abb0b283334e404ffe96a086ca2c12810a3b73e93c44b32ef796f7eecc2a8073684252eab1e488ae6ba555826e78ffee96c9