Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 19:47
Behavioral task
behavioral1
Sample
513092ecff37fe17450c251cefd98692_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
513092ecff37fe17450c251cefd98692_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
513092ecff37fe17450c251cefd98692_JaffaCakes118.pdf
-
Size
44KB
-
MD5
513092ecff37fe17450c251cefd98692
-
SHA1
81d85f3c368752bdc211b3cff7a14fa4f4465a9d
-
SHA256
6c638f283f0121b529b1d83594560f86515bbb7858137dfc010e9b8befb8f80c
-
SHA512
d11fca421a7544354350d24cf8b6ee7aba0f494911907684555159c42781e2132d5fd03d533c0e68c4ab2d5703ef385cecd52af0feedc38638813dd168067270
-
SSDEEP
768:AgGzpDPgrzcI8b1nsGqHckZNG9sdZ+EP1uy/p/CDQIQSf6n2wlh0LGc2Odrryra:NGFjgmsdvuykD1QU62chML3yra
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2024 AcroRd32.exe 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\513092ecff37fe17450c251cefd98692_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d58ab30e361f2b69117a0a88cb863ba9
SHA1d59cc7b87bd0eb4ec5361792a525662d502a3900
SHA25648be8a948026849710ccaaea069b030c148fd73c5010b5925a3096fe6d8d9085
SHA512904a793ef5eb42f8e77ddbf56b2d38b59ff63033a2b8648d7326b05e3412db9729ccabc6f839491bfc5325d08ae8b31c5d1d3276e11ffaef22bb09f56b31709d