Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/04/2024, 16:12
Behavioral task
behavioral1
Sample
0812dbad4212e82308fd0a2883874184_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0812dbad4212e82308fd0a2883874184_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
0812dbad4212e82308fd0a2883874184_JaffaCakes118.pdf
-
Size
57KB
-
MD5
0812dbad4212e82308fd0a2883874184
-
SHA1
21b68165e84d90f336b12147e54f46989cce687e
-
SHA256
4e82c539ec1bd6158732b8e4f38b78761c6ef5b778427214d2650f747eacd0ac
-
SHA512
b971697741bdf7ccc0759c02217b19ea346ce5a2c4f93798824e09d44c5962e59315ea8818b37404f857e5bd7bb910b4f9110bcd2ff9ab6923fc4216ebab9caf
-
SSDEEP
768:dgGzpDzejEzM8trC2JwGkt27df9nmXkytrtNqHgpOayx5S/rCPt6MH0OjxmRCVW9:eGFXeGAGM29nQriFXSjWAMHjNmRgnyO4
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1728 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1728 AcroRd32.exe 1728 AcroRd32.exe 1728 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0812dbad4212e82308fd0a2883874184_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1728
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5904d446a5b345278acea94816f10e64f
SHA1bfd7e1f82325c712cd8df738521ea7a8616c8ccc
SHA256bd2fd20e29e6f18ea3118a0dac8dba5e96124fe974587b52cd2eb1adb59a74f9
SHA5129c0e34f955cc9f47d9c39c272a0b1f18c48c9e6e09bdc44b750b9d1f4e56d568cb9a7f0c9351854808cde0df8b3fbf62fb2688471709a34172eeaf941700d527