Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/05/2024, 09:42
Behavioral task
behavioral1
Sample
10373ea1d3265fffb4bcc9bb6930786c_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10373ea1d3265fffb4bcc9bb6930786c_JaffaCakes118.pdf
Resource
win10v2004-20240419-en
General
-
Target
10373ea1d3265fffb4bcc9bb6930786c_JaffaCakes118.pdf
-
Size
45KB
-
MD5
10373ea1d3265fffb4bcc9bb6930786c
-
SHA1
27d85319b95ba79609a60315d161e357dff4d55a
-
SHA256
701d746dbc632eb2e66f23235865aed8fef73badbb726b619d786d64634017ad
-
SHA512
e94bb5c9a958fdea696b89443ebd84132dc26fed92aaccbd8ba547021ba56d03e06902b6e90a88796914a01255fd7071a428f7cd754016747543b57d7386a3af
-
SSDEEP
768:UgGzpDUykRN5rTbUltImreR+TxQcUopPJREQ3hta6epTAQoeRdPRV5:hGFYGX608QRtBMvPRV5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2388 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2388 AcroRd32.exe 2388 AcroRd32.exe 2388 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10373ea1d3265fffb4bcc9bb6930786c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2388
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD517b9bf3a49cebf264ac5e3f1edb131bf
SHA12bf6b105e1ee7ae54ab6f3c883b9f2a4c4318e77
SHA256db936d1c6f0aee8e84ad6e7a48f1efa7a14e1963a95bffc8000b55a4ecf945a2
SHA512bf493778fff4c2613efe9c24012bf792cf808c9feba3393fb3242a4597b7823d9ab8d1553495877d95e04c17912af16bc487e1b9bdf0bcc5f9f2063f6cbea636