Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
21/04/2024, 15:59
Behavioral task
behavioral1
Sample
ffa5f0603147c2f97ef86abffdf7d5ba_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ffa5f0603147c2f97ef86abffdf7d5ba_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ffa5f0603147c2f97ef86abffdf7d5ba_JaffaCakes118.pdf
-
Size
70KB
-
MD5
ffa5f0603147c2f97ef86abffdf7d5ba
-
SHA1
87844a30500ec387a6f41c61ff4fac332b505a7c
-
SHA256
b3081bd0c5c6dc84576dc59f64f8c35c11b25fde498eb0fbbfe35a351b5c2c48
-
SHA512
acd9ea68908b2e5fdc39ef0ee71f73039a4d946fdfcfa45e42124f5f389b69643efb1f5445bf9143998e99118e68525e2f6d931cc2fd89dd101c866807d30eff
-
SSDEEP
1536:Y8xvpgNJXA1iqV5fBs/d/eJYUdLaW6pOu2ksz9N/WFPFQGNUTz9he:fvp4JXQF5S/d/endLnu2vhNq3NmK
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2860 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2860 AcroRd32.exe 2860 AcroRd32.exe 2860 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ffa5f0603147c2f97ef86abffdf7d5ba_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2860
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d0dc9f5297fbf512bb75dfc6995d387d
SHA1dd83a2a58c317a218454e51254c86062e534b41a
SHA256773f0f2869fcac4a4b4c650163d0d698676216e37eee5f10d93f8d77ed19c1be
SHA512058158b8240ea445ea1aea751c607361bb80c4703013efd5ee894abd65df3b7a333f2d05f0bbc1b80c180c9290355d1d8824cabe18b7c0eac649ef88999dccd1