Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 04:49
Behavioral task
behavioral1
Sample
8966e50f303dd6628dd3081c40450ae7_JaffaCakes118.pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
8966e50f303dd6628dd3081c40450ae7_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
8966e50f303dd6628dd3081c40450ae7_JaffaCakes118.pdf
-
Size
36KB
-
MD5
8966e50f303dd6628dd3081c40450ae7
-
SHA1
f91163eb97e9f3fd9d4f6e12c918aaa2393c1b7e
-
SHA256
3975ebf2261dc906bd0ccc6389cd0879949f7298594f332ba2a550794f4070a4
-
SHA512
4b8210a77392d5940d21a10cef100f5ab2578c04a0b038461ae9cbaadee3d80e97f66f9f7c922abc0a1f7ab0f3903c029c23404c2e5b309a88e3877510b35ef0
-
SSDEEP
768:tYYZz8ZDBVEtGlR7TFdX7m3vIiigb/uWYn1XIXuMZmwgCLWar2O:eA86tGlR7TFdX7m3vIiigb/uPlIXFZm2
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3000 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3000 AcroRd32.exe 3000 AcroRd32.exe 3000 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8966e50f303dd6628dd3081c40450ae7_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3000
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f782aa690db28f08ca430c3a84ff48cf
SHA159307d94b1ce704cd0cb76d332c01c634ba7fe4d
SHA256e3e3c44d20ed2c4d0871f38109778f932859cddc733f9f49d29314f2b90a84af
SHA512b478f98b934f94ab593fc7e94debebcbb167ea908b5e06e9e374a27ea7f0dd31f860656b3f804902ab66058d328af56622158a44a7642f3fb6695191c276e204