Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 08:36
Behavioral task
behavioral1
Sample
f7a4765ed9ff2993a4458080bfe4d052_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f7a4765ed9ff2993a4458080bfe4d052_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f7a4765ed9ff2993a4458080bfe4d052_JaffaCakes118.pdf
-
Size
84KB
-
MD5
f7a4765ed9ff2993a4458080bfe4d052
-
SHA1
a3e54f108fe05c593c875c313a2da187888f5f1e
-
SHA256
3d3ded79c88d93880a5ae6702ab6a6f4b1a2f555197f71b0dd17750808db41eb
-
SHA512
d1fadaf5e0fe690897a6e510864e75a6a262ab89ca3fee415a655963e007410d217c5b5a18e63d0f1b4e9da5feac395641652e951d00dadbfafe9f8ae05c697f
-
SSDEEP
1536:Efb4hJWau8aj/lpzk34RD5woe2G7LUdrCB9IWRQ1QOiWwpOSVWxcbUl8:64hJWaul3zkIRD5wozGnU5CHTOVSVSA5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1552 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1552 AcroRd32.exe 1552 AcroRd32.exe 1552 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f7a4765ed9ff2993a4458080bfe4d052_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1552
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56ed75e8efb8f6a3770cf5509c062d672
SHA17678acb58a350b45d2be559ee30cd33b4f2f8d7a
SHA256600023757dee4b6d330b8905795ab14e7fc5732dfc7f288dc1a14afa3a36fce4
SHA512a958e9ebfab94b421ab66a86bcab52971c1ffe45fcaee4dfd237b990197bf0b530d845bd29a6a3acaa0b6ce66af0ae924c340358cd9f4d5f51498005321f8127