Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 04:22
Behavioral task
behavioral1
Sample
383bc70e618fba988a6155611af65e2a_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
383bc70e618fba988a6155611af65e2a_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
383bc70e618fba988a6155611af65e2a_JaffaCakes118.pdf
-
Size
46KB
-
MD5
383bc70e618fba988a6155611af65e2a
-
SHA1
c1836b0c739fa63620df83c619305a0ab08cb2a1
-
SHA256
c0a4a9358689cae23dbdd753b196cb64dcfe48292e2e86a1f07d11e21f0b9191
-
SHA512
b2511031008b091ba23fd58e4a168511fe3d6d6f899774baf4cdee2cf70e65127cade858c0cba14c845f9552496a86977cd9cc0a0860363d873d12f5182ef8b3
-
SSDEEP
768:3gGzpDhlF88KQLt9SUDBYPxAtAvJVc23bZk7hXggCca9GMu745n/7shTQ+4OU8w3:QGFN/t0c23bZghRiu7E7shTQ+I8wESr5
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1132 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1132 AcroRd32.exe 1132 AcroRd32.exe 1132 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\383bc70e618fba988a6155611af65e2a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1132
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD528ecfbabb5f5dcd2117afbb05ee40ddb
SHA1be34881c7d06fd407b43ffb69f2d9741980471da
SHA25648ef3235b889080b51fd14423ea01f267555dfb4913f954877a841d17a632d8f
SHA5127cda677a57c053edaa0bd5fb323cdf6293179727d3d62e92d585a9d928e1877d7f4be9155321d1a03df92534a493f07926c252f759d62fea41911cb99f258fb3