Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 01:02
Behavioral task
behavioral1
Sample
ac55f960ba0cd9e8955e260f17ebc058_JaffaCakes118.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ac55f960ba0cd9e8955e260f17ebc058_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
ac55f960ba0cd9e8955e260f17ebc058_JaffaCakes118.pdf
-
Size
58KB
-
MD5
ac55f960ba0cd9e8955e260f17ebc058
-
SHA1
9308c569548acb11751ac8798899bc33ad480678
-
SHA256
078e3a7cab82fbd5368d04ce2d311540a68ff2bbd6889eb9deadf78407a3ca12
-
SHA512
44a68851362c98ae05af8e28fb8935c5b7880c482b3ef8ef3edb08eed4391bf95621f85f0d0211d80ef8cb23eb43b1d7e4321bdc44c0ac503d4e447e3924bcc9
-
SSDEEP
1536:l53kz8IuPovGQAsPxqCbSo4lpLnxHwerVVcIAwRcDyHQvcY2n6BcVXFZmGWSHK:l53kAIQKUsPx7bUDB3pK186kuthBcFyH
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2268 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2268 AcroRd32.exe 2268 AcroRd32.exe 2268 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac55f960ba0cd9e8955e260f17ebc058_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2268
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58d2321101e8686b1b2739d11274abd96
SHA13c143877da2b62bf5f2b00b02db63fcfe9c09925
SHA2567916b1bb204b3df6c39b18b3ca45bac4f3341d41b0144d768dacdcfd64898592
SHA512b8f775c54f065caa30fc1a4d0afb95d2b8ce9f64951eb5369b97191fa91d0e0c16ca5bdd262957138de3401ea29db0512eefa9e799a53773cbbf68a4d85f3b20