Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 07:11
Behavioral task
behavioral1
Sample
febae2271f1be433c82bb2dce19ecbc3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
febae2271f1be433c82bb2dce19ecbc3_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
febae2271f1be433c82bb2dce19ecbc3_JaffaCakes118.pdf
-
Size
45KB
-
MD5
febae2271f1be433c82bb2dce19ecbc3
-
SHA1
90f746d4226279f8744f3ac642c38ee7135252f8
-
SHA256
8f29baa4d6172b726fafd7e8ded5bb9b7ad0d612f921a101f19158c3467ef668
-
SHA512
39bed3f6d8a6faff6d9d7b7f4f7bcc731fbc8856b4e2de009be728b7b08df03eaf39eae7b10d18a0f3065886ca5bcd7d891ce969fffb80c31ec5a7db05a09065
-
SSDEEP
768:6gGzpDiRe2caR9DRkE+vALWMHLzQoMDab8jc+GZdQaoLDq6YejG0hELwX:nGF4euaab8jc+0dQNDuejG0hELwX
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1624 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1624 AcroRd32.exe 1624 AcroRd32.exe 1624 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\febae2271f1be433c82bb2dce19ecbc3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1624
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51330c307f3ca2ca02166781ff3f66eca
SHA161fa17806935f51f1ff2da94c21a367216ed0db7
SHA256e5e11f74c49d5a790a39b3c1198b4e9557053679d6ac082f419f85acf00d6635
SHA512e41debc03ede23be0e80a296a4964cd455ef8d6aca9a023b5a2d4a05fe5dcf4a533fae2f210abcea49e5577428a68d33e337026f1b96d003d4e53f40fe1966de