Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 21:54
Behavioral task
behavioral1
Sample
8210a7f57ff93b4d62c901df9ea3f570_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8210a7f57ff93b4d62c901df9ea3f570_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8210a7f57ff93b4d62c901df9ea3f570_JaffaCakes118.pdf
-
Size
52KB
-
MD5
8210a7f57ff93b4d62c901df9ea3f570
-
SHA1
6cedad4aab8a5a8f57d08c1b4f6c49d5c143d3c6
-
SHA256
fc35da2f622fe9cde2dcabc50f918ac1d4e0ccefdfd344ff19f1a0dd2187f47a
-
SHA512
26500f2640dc7cfbbfe7171a6d537e788f870c2738ba8c0e4abbd7f281772a51c844e63498eefc3645edd50e54e627f6e3a2ae5c3ea1a812e7b07f74066d3021
-
SSDEEP
768:2gGzpDyBVksi8liFLVShWda7DngCJRKQULoXD7FlRaoJxv5bNpJjgZwTGXDNAf3c:jGFmTLgS7aqbHbNpJjgZwToNAKqo4YJ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1756 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1756 AcroRd32.exe 1756 AcroRd32.exe 1756 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8210a7f57ff93b4d62c901df9ea3f570_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1756
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD561b2e3595b8bed04ef1a7bd3a17eae24
SHA1f6c535548e6fc4f4a55edac731ad47ead83c755c
SHA25627ee51df1c6d6578fb8476ef93d6b6540d00873b05ca7ad39894ed2095134f73
SHA51230854e01d58b5193fe2d24a735092c2c85c8af624c6ff16022540682080bfd8857b7f700cc1f86b4fb6051c0b349436ad6b46afdb9d96603128b9149fd151190