Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
18/04/2024, 14:54
Behavioral task
behavioral1
Sample
f83d5e8c3485275ff58f4d33a190b64f_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f83d5e8c3485275ff58f4d33a190b64f_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f83d5e8c3485275ff58f4d33a190b64f_JaffaCakes118.pdf
-
Size
86KB
-
MD5
f83d5e8c3485275ff58f4d33a190b64f
-
SHA1
d44bcb10a230cdbc6b86e54f02c5d983dc8de096
-
SHA256
e7ab827458ecc8c9b656a946de86796b10654eb226b5f10cc4c8e2f9f2027eaf
-
SHA512
4bebe45b880f0e6c480b9009799dfbd5abdd611a279c13c37bbb3c36b68933a8cae1a8a3c9b83fe2aea8087f90a4f42b72e2ff86ba342589f1151f9cf5559762
-
SSDEEP
1536:kGn/sU+rLJGcK5gzfSPl0PDOOqx7XRJWHf0xZfgtFbiydnhH3zN:F/sTMcuEKSPqOqxZOtF5dn5R
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2928 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2928 AcroRd32.exe 2928 AcroRd32.exe 2928 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f83d5e8c3485275ff58f4d33a190b64f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2928
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52933654bbbb9d59cd790e674a50640fe
SHA107e6e89368b92b6be29e7409d3fcf1e99f3fc2e0
SHA256c0c7412b80cb620ff169b2437e29688b1830cc86f8cb78f689161861e8d47f41
SHA5124ec5895d894ff94c683109361809f6223223b602d118b592c65a80be13509b2c3f0923e9430f75cbf89b37793bbe0b1eee051c643b1c9ea4e8d6d6ca6aa7b056