Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 23:31
Behavioral task
behavioral1
Sample
b0adf66fcfcd7102d961a319b60095ca_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b0adf66fcfcd7102d961a319b60095ca_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
b0adf66fcfcd7102d961a319b60095ca_JaffaCakes118.pdf
-
Size
36KB
-
MD5
b0adf66fcfcd7102d961a319b60095ca
-
SHA1
ae2102423f710402a7859eed2b5dbf86d3835ded
-
SHA256
9339f29ca7c72ac4cd60cb27bfec568b25ddcd4c67c9330e8648be2973c04e73
-
SHA512
61f704ba8baac64d2cb87b8884fd604091083e14415176a6994b59e8a61433d206d95745bd400300894ac8deba442f360d607fcadeabb005ec9fde51be0b9f9f
-
SSDEEP
768:agGzpDvpk/dj0w1ZJ0OJs9pV54whs//21QkmCZMUSoU09oxcTsjh:HGFjpkp1ZJVwhsX2TmCqBoUfxcTsjh
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2716 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2716 AcroRd32.exe 2716 AcroRd32.exe 2716 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b0adf66fcfcd7102d961a319b60095ca_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2716
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD59186e0782e22f74dac982511cd0363df
SHA19060107c286b6cc5348159259e65f26960be63d3
SHA2566bb25904b152c66ae234ffd6ab83a16a77e4e66e3cabb606145778f187d61d1c
SHA512f95a73028ece703704fd4860c3b451ca5818df1cf0873d4019b955da7cc03edf2841c9e73ac652401134a6ee38d1f6dfa708b7ed1c963715cf247eae2e9c2012