Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/04/2024, 01:12
Behavioral task
behavioral1
Sample
fb970034b5dbad7d0989751a710345db_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb970034b5dbad7d0989751a710345db_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
fb970034b5dbad7d0989751a710345db_JaffaCakes118.pdf
-
Size
46KB
-
MD5
fb970034b5dbad7d0989751a710345db
-
SHA1
02d3d07344add6aedd56d2d47f2e6695d7544519
-
SHA256
47fdb1985b40d706d75cfa2d1fa9a9b219b86f5defe2135a9242b3c900a8ec22
-
SHA512
8bab22d85013d9eb959baa61c6bd138987e4256dc71c23dd79bc4e5d353d4118eb9cdf045ad86041680abd803a6d7f41d1e0bfea7b2ee35808a1dfddec7104bc
-
SSDEEP
768:g2iLxaRjlEGM3M636Hzqx/Kfxs/rYRHdzeTi9J3pZR26BEUMFvxyqhCYPVEf:g1aRjlEKnuxo6r8qCUUGvxyqh1Of
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe 2960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb970034b5dbad7d0989751a710345db_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5176586d77d4dff87d1aa3d764eae6f9f
SHA135add6d756b53f20bb3ddcbf1c3fa12e748d3aaa
SHA25688aec5f254e8f8e9123b2749c7d4dd5eeb9d359c0266597da9f9c103372a50da
SHA512e455bf8a503fdc5053284d088b5c5301b5f5b100211851c66bac2aa04975a862d2590fa1eb7cf33c7911c7009794a1c2ebcb18f57b15ef356248a1af8492b6aa