Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 19:21
Behavioral task
behavioral1
Sample
7a3c86a7fd43d81774fbe21515051cb7_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7a3c86a7fd43d81774fbe21515051cb7_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7a3c86a7fd43d81774fbe21515051cb7_JaffaCakes118.pdf
-
Size
46KB
-
MD5
7a3c86a7fd43d81774fbe21515051cb7
-
SHA1
ef8c8d3f2db1492f4bf5df02ef2512e6ca97e3cf
-
SHA256
30312cc6a47ec232f5853c334e35ea683c82e95b7b4a29d7bacefcf4b1518f49
-
SHA512
2552a2d8020d746b617b61f3c926950c3294a9816ae287735670fdce3e756ef7e42d89a8804e7f011bd8a2ce5196aeb1c3798a87ffbce6316ee92dd4202495b9
-
SSDEEP
768:ugGzpDyBVksi8nJ5lE+aX9zNqUWYUbLJUpxEKiF6mBuzjhqXC3TmaCKxls:LGFmwWY+LJGEx6mMjh33THCKxls
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2168 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2168 AcroRd32.exe 2168 AcroRd32.exe 2168 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a3c86a7fd43d81774fbe21515051cb7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2168
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD583c0844cdf96c8628e15294a76164428
SHA1226be052bb61a76b9edd670dd942b2e6f57dbb8a
SHA2563d713bd370ccd721aa3f41d360208e3ec47167e8e72144aed38618d0c5a2aa6d
SHA5125ac3d6906c5dab9d5afab240b7e779d24f70a78db0cca027b84cfaf44e2f57b293512788387809bcc036b5ad6c579dbabd0574d05a0426e772386b1f7e37980f