Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 05:39
Behavioral task
behavioral1
Sample
0924df91dead8176f331292674901a23_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0924df91dead8176f331292674901a23_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
0924df91dead8176f331292674901a23_JaffaCakes118.pdf
-
Size
39KB
-
MD5
0924df91dead8176f331292674901a23
-
SHA1
ec7cbe6a3323de974a775def261f48902536a954
-
SHA256
19ea33880b218389c4d110d64431049b12338826686dbe824d2185f87c9dad25
-
SHA512
eb06ff5a90ccc43b1dabd0c3add28773d025fdfbe95311f62e9646f177d96cf0f11c2da4eaf0435fd055a0a83682d2cc19720ea6423789f15420b6594ea33243
-
SSDEEP
768:QXuMZmwgCLWarUE5HpxdtrwPD4k6LhmXc84uadgGFIDPMts5ljzK/7hX95VJwjMB:QXFZmGWSNjdtrwPD4k6LhmXc84uadgGR
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1932 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1932 AcroRd32.exe 1932 AcroRd32.exe 1932 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0924df91dead8176f331292674901a23_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1932
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c5fbbf4d2883025c7cef22d0c7ec5e5e
SHA16b552f00c7a17d8746b66ef5c081b02205dcf603
SHA2563a4f74a87a09b90bba6e26145c36bfd2a24be8dd7dcf9931125804e0b38f0d7e
SHA512daa5393b6365008d293fa99db69dd3797746d6eac97576ed5a8e994416cfc369e39947b6c705a76751e339c1f838cccf3e44276409ae0f846431bac7ab6f67e0