Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 06:58
Behavioral task
behavioral1
Sample
09472f149c1bd0131cb3e0cbd08e0bed_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09472f149c1bd0131cb3e0cbd08e0bed_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
09472f149c1bd0131cb3e0cbd08e0bed_JaffaCakes118.pdf
-
Size
41KB
-
MD5
09472f149c1bd0131cb3e0cbd08e0bed
-
SHA1
0f87f77761b35667e6daddc34bdcc3b893b53000
-
SHA256
4dc3be65624dcbe8e854c38adef6ef5d53d21bac9de4494166c5cdef7eb2ed28
-
SHA512
0a7e2c7f55c4f95049c1dce245df5d8ca64b959a8d746acb3cc966806d9862a196d28ef5b6352ec329a98c16f119e7a5e08b7fd3e65990f5ca087e92f61b9bb5
-
SSDEEP
768:wgGzpDmdp7LHa+XjYpCFriFH7rYOzAZSxAgH6AekCMDhk0CpJZ8l4Ic3HAX8Za:dGFqpr8AgH6ANdVqZ2+k8Za
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2080 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2080 AcroRd32.exe 2080 AcroRd32.exe 2080 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09472f149c1bd0131cb3e0cbd08e0bed_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2080
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c2ed4353def264ac3acb0ebcfffd92f1
SHA17fb51728dba8941e25b15c1d9e89061393531781
SHA256ffb4fdbef9a9a142bd439045b31dceb5be072ca116dfcb02e3ade9cfca3344c4
SHA5127e2a94e0b66940cdcbf0f3603b156f3faf9d44eb8f295e24059d45ff06ca2e8ebbc21dfa8b48a700d15ba5234fa7cd3143c4a16e23d1bb4e0c005447814f3cf5