Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 12:38
Behavioral task
behavioral1
Sample
05355308779fc0977da70d2ccb7a8bef_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
05355308779fc0977da70d2ccb7a8bef_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
05355308779fc0977da70d2ccb7a8bef_JaffaCakes118.pdf
-
Size
68KB
-
MD5
05355308779fc0977da70d2ccb7a8bef
-
SHA1
532f815a812e63d001d7f901371efd70c2e722e7
-
SHA256
557ce6b736a048a9aaa97cdd1b01127d8d1021937a840f0a7dab34e81548a63e
-
SHA512
1b4ae5fc229ab261cf1377457ce1e2b6f9924387a32dffd407a4ec8e0cf46fc8e6676e298adceb0f430f048915a09bffef6ed3244796a2a777b6b0a8e1fdaccd
-
SSDEEP
1536:DI14jj0qFXjRixeMxe3WRMMOkLlL1YJFEcVqWpTR/jjPzan2cGYrn+vboMu7czPQ:Y4jjrFzc4gAOJfJZM+kJxdjvan2cGc+g
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1740 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1740 AcroRd32.exe 1740 AcroRd32.exe 1740 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05355308779fc0977da70d2ccb7a8bef_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1740
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5478775c440883656d1107bfd7dc5340f
SHA183f134451f1b51e5d9c0e753af0a3643aa024cb4
SHA256c7d13e5cfd43a0406679ed5dc72bfdebeb267947c2a0588713b897be336ff167
SHA5120cf651cea9eca16210fc37a25f01b8ebca36e5cb7cf0cc26a442ce7d61bf9d8c9c8ceff23a0981a23213bd0d7af7ffe2bebcdfc6515c166d087811d2f4340e7b