Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/04/2024, 01:14
Behavioral task
behavioral1
Sample
021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf
-
Size
47KB
-
MD5
021355deb962d025c66059f2d68e5e37
-
SHA1
3b272766aca2bf42f72aff011169a4312bab599f
-
SHA256
33f7331f08d92e35128971b6a4ec78a16f8217756826474e542a9618b03c40d1
-
SHA512
5d35637e0801406494a8d70c50216eb1ad64522dd108d721d152d75248740c4db8752352e783fdeb5282861144d4987a15422354688b47af73c80ddffe2e4d99
-
SSDEEP
768:KgGzpD2bqqWc2GnyNs0CvWt2ERU/8nSf3L49NxgRwGQThPNbGgmtn2CVWKkXFT:XGFCbqhRW8SvcPfZTfXmtn2g1kXFT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1760 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1760 AcroRd32.exe 1760 AcroRd32.exe 1760 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1760
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c4c77381641f38d0206bcd20d07581a4
SHA1ce6615f07cd4d6e980a92473262fc7650929e52c
SHA25687e9dd84331fb021eeec640ee3b3ee544e778e7556a46f7547ce335221cb210d
SHA51276791c9d08774c4329fb48745267883ec5c9ee9711d9ffc882db6f9d4cc5f00fa38c16ea09627544eaa3c90c34b2d68f85a10c01aa4f43cef76b38c23fe17389