Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 00:32
Behavioral task
behavioral1
Sample
f91b0b240d1e6e4e9bf2368ed214bf9a_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f91b0b240d1e6e4e9bf2368ed214bf9a_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f91b0b240d1e6e4e9bf2368ed214bf9a_JaffaCakes118.pdf
-
Size
90KB
-
MD5
f91b0b240d1e6e4e9bf2368ed214bf9a
-
SHA1
ec14302c2af3fd81d0d7d5406f9efa5525c8d3eb
-
SHA256
38a44d06f1ce1e71ae3f11cf53b3d3381130feff9a0406ee6672dd987c3d9d45
-
SHA512
d7c1e28abb6b567259106c5c49fefb063f1ceaf0651245d9d3a190448b3c59eaa499fe51a2c1a45a594a122e5c546c8920891e9d9c48883ab8ffa61e8eec83df
-
SSDEEP
1536:uAeisPPLhEY07qh//eZBfhoF8up6atqz+2qFeQVWxApOGzWMHDehJ02/QqVQf:Ty7k7ql/eZBfaF8sqK2qNy3GTHShJTK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2336 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2336 AcroRd32.exe 2336 AcroRd32.exe 2336 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f91b0b240d1e6e4e9bf2368ed214bf9a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2336
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58dd57abc9ae013ab488601c10b040db6
SHA109ce6905a8aa513ceb5ab4e690dd55438201c3b3
SHA256f384588b5b3928e7e598914f9e2768c1d78b0b3d1ac1cf87dc53282e9b1de2b6
SHA512739e5e88160a3415f678b91bf02678e24e7be85885be71a1749571ed1aeb8cc71feb5786b4a778487d7ec762a8ee46a2a9926abf23c1684616fcdbfd67609a41