Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
09/06/2024, 23:28
Behavioral task
behavioral1
Sample
9a46a95ee229f52958e066e38b4430dd_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9a46a95ee229f52958e066e38b4430dd_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
9a46a95ee229f52958e066e38b4430dd_JaffaCakes118.pdf
-
Size
33KB
-
MD5
9a46a95ee229f52958e066e38b4430dd
-
SHA1
3010d9ab1f415df11b69dc2348e63fca3a08e0e9
-
SHA256
9adb5669fc2eedc100f8ad96e4d914c1f93f1ecda71ea7bf50591df30670af95
-
SHA512
b7516654d9c93850efb78d8d015c2240709c8cf7606212087f422ca097a4794e34cd26e7cdeeba49d88f091c583811e3b51523bb58915c88cbfec0877704436f
-
SSDEEP
768:3gGzpDPnFgrjtcvJeaWRK5f55QOgkSzZAPX0fnLUS:QGFbT52Oq1A8fnLUS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2844 AcroRd32.exe 2844 AcroRd32.exe 2844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9a46a95ee229f52958e066e38b4430dd_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59dead98db3e65cd4e32954766671f153
SHA12f77c27877fcac09b0dbbfcecfe3b474d452dea0
SHA2567d4a2aac656002671818a8ce56a6d9e884387cf00e88d4f871a7fe9ccec2318f
SHA512ac7af9eb1e12fb73103b8ef5c0c66a5d7b925f6733604d4780dd1de0a7ba8ab70949b6eacee51c9a91b919ab50a7277919e467eb93b8ff92be8c7d3f5f89bcd8