Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 22:51
Behavioral task
behavioral1
Sample
77115c70e8c614cf6c7d45f1b648c572_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
77115c70e8c614cf6c7d45f1b648c572_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
77115c70e8c614cf6c7d45f1b648c572_JaffaCakes118.pdf
-
Size
43KB
-
MD5
77115c70e8c614cf6c7d45f1b648c572
-
SHA1
e66a88240c4b9618758a096bff292b90a80f2fad
-
SHA256
5055392370415e01417348185b1b82ed58aecebe123342f729ba63bda5ed0916
-
SHA512
ae18696ab2a46790feb6eee0f1f34e68f48db415573aa4f976f23bd176150284e32ae8c04b14cda6bcd986ea7aba00df9ac539d0705972b19214a441b5c4107f
-
SSDEEP
768:4gGzpDQpBohsE62lizxHUQLhe7nh6loB5xdnyugOqsE+KCknALq97GTR9M:VGFUpBcsE/liOJnhRXxByugOqsd8ALud
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1660 AcroRd32.exe 1660 AcroRd32.exe 1660 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\77115c70e8c614cf6c7d45f1b648c572_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1660
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b1676a9feced9e23d0a202df507e258c
SHA19a6b35ee6b37f2966c0c639ed309d3cfc08c948a
SHA256980d4e90da8d948486db062b70b5f6119c9ac6d75546043bc62f214006c18725
SHA512a388e5b2ad2214e0ab226834d9cb5eabb7b84f02b6712b9f26d0c37291c55bddc87e199a437010ff2ddbdbe1ffbebfb17730bf91d67c702edab672bd74d620e2