Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 18:59
Behavioral task
behavioral1
Sample
767f871181301615df1b0d48c74bd78f_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
767f871181301615df1b0d48c74bd78f_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
767f871181301615df1b0d48c74bd78f_JaffaCakes118.pdf
-
Size
41KB
-
MD5
767f871181301615df1b0d48c74bd78f
-
SHA1
616f0d921c3681eee3b0663fd380240a7a986ee8
-
SHA256
6ab599f650d7b57509973faf10da15f364c779c37d0d340e0949664b6351e263
-
SHA512
fab22844a579049892a11246aaf4b69caf1ac7fa918ab51039d37f2b29df52dd3c2e6c88a7b94d0092a0ec22c6bc435a813010b5a4c784e0bdcc1fdbdb00b578
-
SSDEEP
768:UXuMZmwgCLWarfS+T1UGFb++xEsLtfovSlZ/NAaBF/TXTPrJLuWwAKQUMpB9tD:UXFZmGWSfSE1UGZus1ovSlZ/NAa7TjTJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1960 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1960 AcroRd32.exe 1960 AcroRd32.exe 1960 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\767f871181301615df1b0d48c74bd78f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1960
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD541ff0ca86deba3e4150517224b4f681e
SHA1461105efb492faf40ddb3f00e5cd1de6afa5754c
SHA25690c5aa7b88367d5af182a1ff440b14c99556e8f59476baee9371f1231d0e6834
SHA512bc95d0c24ddcfd4c1eaa8c80d6c098aa3f747afa1d4a461fd8602e243d15d2608cdc3edacc8113137275156e5217f79b4b510a8e732c761b3607fc63b62a02ed