Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 20:17
Behavioral task
behavioral1
Sample
96202acb5306fbcbbbe289d9a7265e47_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
96202acb5306fbcbbbe289d9a7265e47_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
96202acb5306fbcbbbe289d9a7265e47_JaffaCakes118.pdf
-
Size
40KB
-
MD5
96202acb5306fbcbbbe289d9a7265e47
-
SHA1
bceb5e8863cc5e7007ea75f246d20592569a380f
-
SHA256
010f773a4fd61ece9b75e1dafc53ee43f6eb1ce0a2b1ad239dc241d69ebb6948
-
SHA512
7ad044ee3923861b314e1fc78ea3465e4e27bcf10f002bbf08e9a43e5b185ee946d1f58ade1ca38cbe66483593a80e26eff615cd59d1df3d9b01fd4304d2894d
-
SSDEEP
768:8XuMZmwgCLWartE5Hpxpj6scByVXxHElpuod31eCWo3DNN2r6NDg+Jn58Wp7oNjY:8XFZmGWSOjpj6scEVXxHElpuod31rWoL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2372 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2372 AcroRd32.exe 2372 AcroRd32.exe 2372 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96202acb5306fbcbbbe289d9a7265e47_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f6435b147eba3d28f7cb1ca1c3f995a4
SHA1b98a479f57a18265f44fd726577d29b35c4393a3
SHA25624e3b2bd3c17ee1a491f0f26a93b80396590c635f6d053ef4b6a08d99139d5ae
SHA512e799ac87c5cbc7135e8a4268580c4ffb4de0905bf83263338b53b41a5db5a0f9f2659f9e14d7dd053203c793d0d5648dd1059308a0dbd0646f8bee8aeecd5c0c