Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 15:42
Behavioral task
behavioral1
Sample
ff9ddf25eb828872c9096aa435ec1e68_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ff9ddf25eb828872c9096aa435ec1e68_JaffaCakes118.pdf
Resource
win10v2004-20240412-en
General
-
Target
ff9ddf25eb828872c9096aa435ec1e68_JaffaCakes118.pdf
-
Size
74KB
-
MD5
ff9ddf25eb828872c9096aa435ec1e68
-
SHA1
304a7c0e0083ddd17955d8902403c6d1fe9797a2
-
SHA256
76868200ece96f6d97128a37c2a5424cb17d24e60e6189ef1d37b0df7a5c0323
-
SHA512
f69da570e923fe7c22917d3d1cb65f6799600545abe860d14df9bbe488906db11edfe761d5949e339c386b7752f24900addfe668c7630e5211bbf395ef99aba9
-
SSDEEP
1536:gNIj75st5pmEjOcd8wi5h90TbAfoCmm+oWpPfJNAmDSm4FW0qQ8E6:TspFx8wek+MfNAoMW0qd
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2204 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2204 AcroRd32.exe 2204 AcroRd32.exe 2204 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff9ddf25eb828872c9096aa435ec1e68_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2204
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55f847fdf850d6cc2aa4b38b1346ebc84
SHA1277a32ee35d27eeeacbf25968936ef4d039e57fd
SHA25609929b8ccb70e4171ebc208dd919207835eb6ce2917b454aa70cbb8d7ac99db7
SHA512ab328c6658f7ba0269223ccbbbd35ca77c4878130ec888e94c4c5f318d5857abe78dbae1d3e00b10d2b72ea21b627701116157b74a49c8c27053cc00d10ae95d