Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 11:14
Behavioral task
behavioral1
Sample
ae280a46809f3f567b609de17fd384da_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ae280a46809f3f567b609de17fd384da_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
ae280a46809f3f567b609de17fd384da_JaffaCakes118.pdf
-
Size
74KB
-
MD5
ae280a46809f3f567b609de17fd384da
-
SHA1
a711dda8f9371a2caba27dac76d6f78dedcd26a9
-
SHA256
4abe30f012c7b1a092702d95e767d16f3cc08ff6f0da98a0a68e7bfc2aa89f8f
-
SHA512
ddbcab41152c62076acf85b0fddc1a83ffbb82c458a1fdb06be05c7abbfecbc065d64da056a87af9f30aab6077f47a00594a4af35c700faf2333e4f8ffa67c47
-
SSDEEP
1536:qGFDpATYEV5Ob8W4MmTMmyAduwcVlLSNNFfri5l3+16LBTyWh7+91OoHuNv:TFDp5nrMiAc+wl3+1gTzsHi
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2224 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2224 AcroRd32.exe 2224 AcroRd32.exe 2224 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ae280a46809f3f567b609de17fd384da_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2224
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54df9a2cad367ce273699a6f51ce4b316
SHA120ee8949608ff06c39cbac1ef202c4cea2fdd8ac
SHA256c1072655876a56886fa8abd4a00e404155ee2599181d470968cb34c61e58c0ef
SHA512395ee53d4d4a131a1a680131c814c77a2fb1107f8dbedc41d0f12ea01a0301218da777afa8c7666c5c453c8eee66ce57e9f92ba9e5e2ca7f0441f16092c6b919