Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 17:47
Behavioral task
behavioral1
Sample
afa0781d5962aa1c50babcb3b0c81de0_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
afa0781d5962aa1c50babcb3b0c81de0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
afa0781d5962aa1c50babcb3b0c81de0_JaffaCakes118.pdf
-
Size
50KB
-
MD5
afa0781d5962aa1c50babcb3b0c81de0
-
SHA1
3e67c8fc2d3024ef5db473a85d656e73bb448a2b
-
SHA256
ee63d1bccdb15110570cc130934838da0a0881841dde5f5c127a8cd901e2856b
-
SHA512
c7244db3442daac0a25dc42f9f1b5ada0fbf357918eaf678f41437dd56b2eaedb4fd3241c41ea326b802e3d7bb40086621d1cbd78e91a632b35c5178b6482b39
-
SSDEEP
1536:C+0ly53o1B9lKbqQq8h0obl28SnyqqNMD82h3JYXFZmGWSYc:C85cP4uXAVbUn+ew2lJ2ysYc
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2576 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2576 AcroRd32.exe 2576 AcroRd32.exe 2576 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\afa0781d5962aa1c50babcb3b0c81de0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2576
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56e639cd4232564a75a9fd4a910dad542
SHA16147bfcd895cd67ae61a229ed0e01e5c2cf71f42
SHA256465d73d1f04a07ba78baa34325646063867d5f1717526fe5d0c5ad951d6fbf90
SHA51208c45766fbf763f4f0e5b285557623e37005894b22c3c055d38b4e703c61bfba05d632788e77d8c6e883f1fd25a3a056cb21785718e961b831db72ee0605fcb5