Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 14:38
Behavioral task
behavioral1
Sample
f8354e85f7b38de3313902ff22525c73_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f8354e85f7b38de3313902ff22525c73_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f8354e85f7b38de3313902ff22525c73_JaffaCakes118.pdf
-
Size
87KB
-
MD5
f8354e85f7b38de3313902ff22525c73
-
SHA1
5860ca196951d933c55bf3b11ddfaffb63672b39
-
SHA256
1e134953258bc969d6df244b2be9a0f6a695f150b35f4c6a88e2387d6b025138
-
SHA512
355904e5148aa5f239331953c82a1d59a2027e11b396a70794457ca29022c8969a24ba1dff74afd4c7e9efe38be203d38557955359fcbb04a5043e8ccedb1d2c
-
SSDEEP
1536:E36Y5AELGyLjI0szqm67ztRElA85KBm4nHNmJBRzmgIlvuPUcVDl7WXKOiPxXcWm:QpqGX0sBVtmJBRzmgIEPUcVZ1OWXJZa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2196 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2196 AcroRd32.exe 2196 AcroRd32.exe 2196 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f8354e85f7b38de3313902ff22525c73_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2196
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51a070f0e0d3242a1ba0fef30d13464e0
SHA1a86a6f0bf1cc69cc4703f75cd4750607fc6ae89f
SHA256bca2dfac756625fa629b30b57a52d29128564768ace5e35562a2020bbd360ad6
SHA51276e168c47c8478b80a912d5a892b2963ffcce6f6fd51188d34dfebf2ef6f181e09c39d415d4a8e5bf0d615ed7a6df15d1ad4715ba8bed546f3fb879b363bf426