Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 12:23
Behavioral task
behavioral1
Sample
5f0e01f4c5791ed4f1a0236d6e77baf9_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5f0e01f4c5791ed4f1a0236d6e77baf9_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
5f0e01f4c5791ed4f1a0236d6e77baf9_JaffaCakes118.pdf
-
Size
58KB
-
MD5
5f0e01f4c5791ed4f1a0236d6e77baf9
-
SHA1
8b69a40123b5cb6bdf34604bd09f88f86c8c6aea
-
SHA256
8625f17ba565d75b510df529433a693dfe4a0279e38a193f996b139212d7ea65
-
SHA512
a7a86313142e14e419448f671a8f3393afde076a4ec543dcbe3da29afd3d9a117c883dac8be53a49b4efb026916d5032a9ac5f2e96cad0dea1765f3df54191e6
-
SSDEEP
1536:Xin8WCCwqsCjRvMT5OVV2hbitPwF6Qp4z9/HLwZJnYxSnNcXE8H7I59HjR8CkXZp:XO8Wrw7chMT0H2hOtq6prs5AUW0G0zDo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2256 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2256 AcroRd32.exe 2256 AcroRd32.exe 2256 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f0e01f4c5791ed4f1a0236d6e77baf9_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2256
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5433a3a64a6cd0059bc67f1476183ee87
SHA15d9ac540141e85d90fe139f88d8a0873cd97e9c1
SHA256c7684affdb4da64c99b69cae69221cf9f6991625f03cc3f69ba7b0a92e003223
SHA5127aa40c74f182623d43d7bf8610eeaa2e99b3a72d84a7f4bcea2062df6cfe791266fe45d4c51b5ab5ece013f84829681e1baf3893c3010fe060503da6bf6afef7