Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 03:13
Behavioral task
behavioral1
Sample
f722fd6d4907a22cf0442906ee8add9c_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f722fd6d4907a22cf0442906ee8add9c_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
f722fd6d4907a22cf0442906ee8add9c_JaffaCakes118.pdf
-
Size
76KB
-
MD5
f722fd6d4907a22cf0442906ee8add9c
-
SHA1
1ceb1a9866b001633810199630988d1cf310eb71
-
SHA256
1553b2b8a7fd9fc812ce0359d193268739ef1b6c5b4a5ca038b950aa9941132a
-
SHA512
1a4459bdac5c344669868db5ecda94501f9a94689ddec3d46bb939e2808e476984adadc2bb11fb2fbec53050865a586bcd78fa7157ae184daedf350295fb2e03
-
SSDEEP
1536:dayslUACqr4aIuL4YLxVUqF8OzQz+rZ1hQB/WxeB6QrMW8pO+ouV:fJVqr0Wx+Q8ODcBgeoQrH+t
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1636 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1636 AcroRd32.exe 1636 AcroRd32.exe 1636 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f722fd6d4907a22cf0442906ee8add9c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1636
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cc58ce9f744208d229d34dc2e045e7ba
SHA1464aa75db6828e4c83b2bc84faeb37530eed4e63
SHA256d31b5b4055991614ee2022909f718304bcf9bb0a0beca36a95b6a24dd5c02ba4
SHA5128c00ace3f7ba72bd46500f1f61d92d18d710b95b96808f96a44fbeb57b9ee5180f3775fb7aa69ee33215a086b946dfa7f746e5f68d5789e4177d39886f5e07af