Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 13:00
Behavioral task
behavioral1
Sample
94ee95660408f7cf8f31be34eeef26ef_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
94ee95660408f7cf8f31be34eeef26ef_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
94ee95660408f7cf8f31be34eeef26ef_JaffaCakes118.pdf
-
Size
38KB
-
MD5
94ee95660408f7cf8f31be34eeef26ef
-
SHA1
2683352eb2e3db99c567c31322c684af54c4fd63
-
SHA256
4954d306a1aa8d6ef836f2b9d0849c879edfd8dc0d01c0da25e7326dde8930b4
-
SHA512
37ff7cf67bbabde92cb347e0e7030eb56fc7ea48c958b2581c1cbe16e31408d30d5da83cc17d0eeb6ec5cca6a92d749af21c263c7c3acb5b6f2866609a6c949f
-
SSDEEP
768:WXuMZmwgCLWarJ3E5Hpx15LI22QRHuC5vGXuMdxyAozKZ+8AFs/hlQac7oawW0Ls:WXFZmGWSSj15LI22Q1u6+XuMdxyAoUBu
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2508 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2508 AcroRd32.exe 2508 AcroRd32.exe 2508 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\94ee95660408f7cf8f31be34eeef26ef_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2508
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51a6c2e682c80a6d21eae2aed048fa442
SHA1c71e24097fdac7b8edfb1f33fa585bd2f4fb8f67
SHA256702efdd536504ed2e547a9ef253e6f2ea72e7e3aea2a43a66c18d3cfeb023059
SHA512cedbb11aff70ad0ae2303afa39c48ebef7cdf9d332621141743b25e6859289a0701db740649bdcb8603322b88a75b52c4f1b74afe61cd8bfcc42d54c0f539565