Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
31/05/2024, 19:09
Behavioral task
behavioral1
Sample
880977bf6cfe4f141cc2512d857d0427_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
880977bf6cfe4f141cc2512d857d0427_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
880977bf6cfe4f141cc2512d857d0427_JaffaCakes118.pdf
-
Size
42KB
-
MD5
880977bf6cfe4f141cc2512d857d0427
-
SHA1
69543075654cabb0f49410b35700f4fac5d67fd2
-
SHA256
21a800c99cdb527a1712fff0981921926be9f1f7ec5049f8e255c2262d269185
-
SHA512
915251eb82b04d185d9720457f944b12764eb9fd32d4b8fe48c659d08c4045f5886e1e134225edec0cdeb7c5c4e04331dc21f874f5ba523baa7b2d780ffe2c45
-
SSDEEP
768:DyHAu1IH9gkIcexyAdrOmZKnxtPjlSs54qiQiVe49pkwioyJsbm1Q/lLbZcnExFC:DoDs9g4eNN+lzZijVe492nJsbm1Q/lL8
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2280 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2280 AcroRd32.exe 2280 AcroRd32.exe 2280 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\880977bf6cfe4f141cc2512d857d0427_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2280
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD53e6a453cdd5aa7bfdaf86b4ab592de02
SHA10cc2d0746b5581c3072e3201942f71afc70a718c
SHA256fff90d7aa8f3b61cbffd6c69acb4fb3efe23a194eb970859ff233144472148f7
SHA51244df0579dfb4fe5fbb96e82f211a4da89de0d381801e26173a95844a8a9b3cfff9f4824a617aebfee4f8f6dbde6f118d0a4eee43e232ef057bdd15e7e0c005b5