Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 14:52
Behavioral task
behavioral1
Sample
75d70f7e0540524aa697b2d150f60eb3_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
75d70f7e0540524aa697b2d150f60eb3_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
75d70f7e0540524aa697b2d150f60eb3_JaffaCakes118.pdf
-
Size
13KB
-
MD5
75d70f7e0540524aa697b2d150f60eb3
-
SHA1
0e22d70bb8f5cca3d52cdb3ad230afb126c42148
-
SHA256
ceb3f6657d4ebd8c6f47f2ada45f1834928547ac124b8e3ac6d34300a1c4ab9c
-
SHA512
4f833e5c20242063e381df848ccaa46977eb4d05367686a4747e96332a67754a44e0255104056258b5442d4f6f0c118400f6ac84b93275281897ec1e1a5028a4
-
SSDEEP
384:Vz86s7tzSwSz1GnYQqxTyXk/CcPsxMPmdZHAc9kHOWglBe3wEdQpOl7:Vz1s7tzlSz1GnNqxTyXk/fsx6mdZHAco
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2320 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2320 AcroRd32.exe 2320 AcroRd32.exe 2320 AcroRd32.exe 2320 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\75d70f7e0540524aa697b2d150f60eb3_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2320
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f528a0c91419d2a7279db2d15ce46f24
SHA1f60621dbe850365787105823fd4ea06602e9a07a
SHA25683caaab81375997a94fc1befa8d918516a52f1da4e788b7631745ae52a2f551d
SHA512c6351388c2aee008bc02a68fa6bb68eb8c0f957d1715b1c925476ebfb5bb5a1ff6b6d26cedf4adee6f2b640eacd69cb21c32d99d4f5c774a74de5fa171c3354c