Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 14:22
Behavioral task
behavioral1
Sample
678f8ff4262265c98fa9f83252ef6017_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
678f8ff4262265c98fa9f83252ef6017_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
678f8ff4262265c98fa9f83252ef6017_JaffaCakes118.pdf
-
Size
41KB
-
MD5
678f8ff4262265c98fa9f83252ef6017
-
SHA1
0f8057295e06af69d954a742244e821b8e687568
-
SHA256
b4b35c28270c26e8c8256c6714604e7325633edb3ddb46a8fd7793f186ce3f5f
-
SHA512
8ad28b8f457dcf2cd21294d5e5f77adf3d75d8e3ec28eb25657374e435e5ea2a1bbfa3a97f6051d2607d0ecc651b99c8d02e5a352d1c03fa67d9cb50f727fcf1
-
SSDEEP
768:fgGzpDip+2fVsSJPIvFMEIlBTv1doSyevnzQir+Z3I5BE6zarMcGmmAhm:oGFmpjJJPr6e5BtzB9mmAhm
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2412 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2412 AcroRd32.exe 2412 AcroRd32.exe 2412 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\678f8ff4262265c98fa9f83252ef6017_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2412
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD52476b30f80a166383adb724f0fbb205d
SHA1c73f3b09b5ff22dc744e42a5d4252f4ea66217e1
SHA256c47fa0917282d4ff996e2a3078504229ceb46a74d14a852de23d9e5f2a04fc09
SHA51289a45615119d6f1d11b0ec0e42ee206255001e9be7ce1c9593db43afbaae7c4668c5c492e5ab30ab71f0b243c8f5ad7299aa234a91cbea8b769de2faafee8f02