Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 03:48
Behavioral task
behavioral1
Sample
f97050aa6a5f8bd62982135d454bcbb3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f97050aa6a5f8bd62982135d454bcbb3_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
f97050aa6a5f8bd62982135d454bcbb3_JaffaCakes118.pdf
-
Size
71KB
-
MD5
f97050aa6a5f8bd62982135d454bcbb3
-
SHA1
a92324b0ebf0fe5daed7867e9aab510daf584e94
-
SHA256
1c826dd73ad93a6a40dd355b69ab8f5346b0052159fedce49631d2bf92339b07
-
SHA512
c32fad58201134fc278bd4ad46cbbce0113ceea1cd201af6068668c357fb6fc87f346de94676f52448758d4b2ff8bc70b078dd08690e61c4103b5706b2657c59
-
SSDEEP
1536:L7NDA7cxtH+kez1SnGNNsHBSTMMmZWeK939DBbAZRGzIZroz4:fi7cz+J1SGPs4t+K/DBbKRGzy7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2144 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2144 AcroRd32.exe 2144 AcroRd32.exe 2144 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f97050aa6a5f8bd62982135d454bcbb3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2144
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5ed8612c3d5f3e1c108957e9383101087
SHA160541faa655eed3781e45c016cf5e9c212afe2fb
SHA256b9274d13259a5db7aa53d2734194fdb7245e7e0defeb72f1827bdb01f6091972
SHA512c650ea7cc5a2a1d4f5d7917c3e0c4e0bf51e9c142c34014a2400c6450b79afeb2c3ce97c0d6d65407d4516d6ec684bbb51be85765786419ee851b7bac5c5de2e