Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/06/2024, 11:43
Behavioral task
behavioral1
Sample
9e0f655c6104ca92f3a8192f84907662_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9e0f655c6104ca92f3a8192f84907662_JaffaCakes118.pdf
Resource
win10v2004-20240426-en
General
-
Target
9e0f655c6104ca92f3a8192f84907662_JaffaCakes118.pdf
-
Size
41KB
-
MD5
9e0f655c6104ca92f3a8192f84907662
-
SHA1
8f231a12d07a322f19fc2e450c359c828c3d4f72
-
SHA256
62097bec305f03e79b6e8e63753fd705c547dca160ec3a1c5dd77d0d12f05a85
-
SHA512
6965a048f93146d5d725dd978e16b45260ebb06e19b556e2389a512660e4b47bdd3b3815c65e27301b043d54675b3b4b4abbceb40aaa56a066d874d5c4bf7a6e
-
SSDEEP
768:dgGzpDXpm6TPCtRb+JiepqDYXsenZlI1fiz3+AzHA13HP6d2j/Wa3HNUaTf:eGFzpHJieweoeOAzgtCdu/Wa3HNUaTf
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2008 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2008 AcroRd32.exe 2008 AcroRd32.exe 2008 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9e0f655c6104ca92f3a8192f84907662_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2008
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5aaeffebe4d0ef6f77ff776da5580bf4c
SHA175d385eb1bdcfa721182ac18bfbb81df58811c06
SHA25639f9ac9cdc8dcb5d86e3827dc144ffa47336da3cbd1f104d75dc82c8d86146d8
SHA5129d1c1c8f8355493374980f826c47cc0675f64e23802a347fbc53916fac43bd9f4f81f37d4aa7aa1a313712f5464c2e8200e95caf4e63271183ad606a00efcf92