Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 23:13
Behavioral task
behavioral1
Sample
fb61eede770e56db51d223139426af24_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
fb61eede770e56db51d223139426af24_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fb61eede770e56db51d223139426af24_JaffaCakes118.pdf
-
Size
90KB
-
MD5
fb61eede770e56db51d223139426af24
-
SHA1
ceb14815f906e0fa4cfc8666898492dde69a8026
-
SHA256
2de6d95683be68a357b684c94b32bf9cb71987c7d884186c8b0d89f1141bc633
-
SHA512
ea270ed013c07423a62d479fbb4a697339331b8f046092cca31609e71985714f559d04ebe6742cbf2023a87d17b946c97214725c4bf79f50047ebfcd9e14f6cc
-
SSDEEP
1536:MIoQqWiL7Dkwzb0TNs0MrLKgxdxveClKj2Nl3Dxsu2X+oktWkNpOPyQ6EmRWPegW:WWiLHkdKndxoj2HK9wWPPNmb6nnU
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2912 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2912 AcroRd32.exe 2912 AcroRd32.exe 2912 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb61eede770e56db51d223139426af24_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2912
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5efba8053c4f505a7b6dde3b775777f58
SHA1b930b46dd7a78ad83539874e5c78454c971ba85b
SHA25690bd40df76e297e1dfb8dccafc4c5eeaf05d4c10fd1f9ff070419f3f70fb8bf8
SHA512250e878b6f42ec0b2fc6d5b4751b644b3ba20a82951cf65092174bf64b0aeb37089bb909b334fcbae2ba4bab4da839582d922b4bba5fcad2a92be11b018beb09