Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 15:15
Behavioral task
behavioral1
Sample
67b1952b0382ede5d13a19df5c92b3f1_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
67b1952b0382ede5d13a19df5c92b3f1_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
67b1952b0382ede5d13a19df5c92b3f1_JaffaCakes118.pdf
-
Size
34KB
-
MD5
67b1952b0382ede5d13a19df5c92b3f1
-
SHA1
28e1f41116debda35fc91faa4ade091ee7230f3d
-
SHA256
c4cad372de4e93036e5c5748c8de796daa2d57db97adf7f2a22ef529bcb6bcf7
-
SHA512
1b435bdfcbff1256beec6fdffe454fd615b612f98f5f9545d3b3ea94a584d82eceb6369c7cc34373e32791cc1b0fba346c6c293b57ffc1b6ac85e057965e07bf
-
SSDEEP
768:2XuMZmwgCLWarHKLDOKv18HqvV5awa9br1Cx3D:2XFZmGWSuOk1vavZhK3D
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2768 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2768 AcroRd32.exe 2768 AcroRd32.exe 2768 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67b1952b0382ede5d13a19df5c92b3f1_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2768
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD597ec1ffe430705050370c9aebec06785
SHA1fb0cc38a1b9a284357e2a3a36abfa6c07561f111
SHA256aeedba8817473c02a0d0e5b4ddf369558a9652b1a936c681e3c85b577d0b5c17
SHA5121359c3de0c4e2a73977d20edfdd1acd0b5734ccdf9a4be651f3a3e3167b0f960a959d30f14ad6539453e206464f240d44df9c0eb9f79426669eb1c71815a9a7d