Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 21:58
Behavioral task
behavioral1
Sample
fdbd4dcc3deb2a71f2ac69986f001f27_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fdbd4dcc3deb2a71f2ac69986f001f27_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
fdbd4dcc3deb2a71f2ac69986f001f27_JaffaCakes118.pdf
-
Size
90KB
-
MD5
fdbd4dcc3deb2a71f2ac69986f001f27
-
SHA1
01919004fa99ceea3fbbf936cd0b4705eb4610ab
-
SHA256
d0eca12b40e165dba9140b8b831953b06aae0555ff637cb552e943b41be3b083
-
SHA512
69f3343ed11183d52999c7204f0807961294b1729743d8c763b65ac0d18b189fb507b2ebdeeb9145a2810fafa6f66b73118dfdd52358e0fbc07b0352022f3865
-
SSDEEP
1536:1lynLqN17Bq27/APvmO/Yytgojg/BMKjArb+2T7ak5wWwhVSjw+UCRa2XXR89xW8:ScRccmvmJytgMg3Am2CCkSjeCRamhsgI
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2548 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2548 AcroRd32.exe 2548 AcroRd32.exe 2548 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fdbd4dcc3deb2a71f2ac69986f001f27_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2548
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a421092dcc4a263be3fc99f3aafe5ff5
SHA146cdf5bd5953e279688fe4e6c812c5322134047c
SHA2563f0c98c9f6a63731602c212a7d03c3002edf4450b5db32721ec676bfdfdd3332
SHA512379bbb3be571d519ab9a1e5ae4bcfc34baf045e626368aea7112cfdf59dbb856ee6108c39738e45982d68cddd90dbeaa5bf4f53eb7ea1c4f4bac055eb08bcd20