Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 06:27
Behavioral task
behavioral1
Sample
44e37eadefa76aefe38860dceb8da172_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
44e37eadefa76aefe38860dceb8da172_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
44e37eadefa76aefe38860dceb8da172_JaffaCakes118.pdf
-
Size
37KB
-
MD5
44e37eadefa76aefe38860dceb8da172
-
SHA1
e53e99b639cefd7d7f26d4cec1bd03a57e510872
-
SHA256
214fca2ac702d2f27429e55af00dd0b902946700376c11220aa52148d6dcc9c2
-
SHA512
b2105ad114dfd3d03938b14903f69b5c99d5e98f2bca717bc6c4901d65afa6d9c660015ebd1bba1fbd82ab99f97c3857991b727aacb8fcc3f41d8d88f18ed1fc
-
SSDEEP
768:NXuMZmwgCLWar7wSBbRDry6fq8j+SidqZeijjnVsdv9MYDMajWbrVt7U0cBhs:NXFZmGWS7ZBbRDry6q8j+SidqZecjVsa
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1576 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1576 AcroRd32.exe 1576 AcroRd32.exe 1576 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44e37eadefa76aefe38860dceb8da172_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1576
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5cc316f2811fa2ae14a453953a37f2764
SHA15dc6240c88b00e48b6dea450ff8b17bb08e061fe
SHA256633e07f1787e2be5c0c16e783782990a0e39d98d220bf24f39cfc334a5668048
SHA5129a5b7b2c7669c62c9f5e5f7f56d71acf23b38bdce6e0573b0d6717ad554d099bb36a9bdbcc587886fe8ff507d280c44663a0ab44c0e083350e4577b17c45363f