Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/06/2024, 04:30
Behavioral task
behavioral1
Sample
b6c294c8127262d1daf8e696fccb4dff_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6c294c8127262d1daf8e696fccb4dff_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
b6c294c8127262d1daf8e696fccb4dff_JaffaCakes118.pdf
-
Size
33KB
-
MD5
b6c294c8127262d1daf8e696fccb4dff
-
SHA1
c2ae9edf040042728186f738a92c55e6281ae3d7
-
SHA256
d85dc51d6b6124f411289171c79838527a1fccd00cf39ff020cb8739302baaf1
-
SHA512
e99ac8f7998dce50fbfdc62ccc76f697cb7415ddf8b4afc6628d7e70a77cabae9e184fd80869d60348b0471c777b47721d0e07420d6cdbf72944272c6e90d55e
-
SSDEEP
768:gXuMZmwgCLWar6E5Hpx9krlF1PH9oAProbw+4zHKdCLeJspKQEMP5qchA:gXFZmGWSbj9krlFdH9oAProbw+4zsCeZ
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2880 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2880 AcroRd32.exe 2880 AcroRd32.exe 2880 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b6c294c8127262d1daf8e696fccb4dff_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2880
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5e05b70e647ae33a2d76ca1ef6f44badb
SHA1958d1610407f0467fd6f2b890cbbdb93efbedb45
SHA2567a16d8fd4fbb415a5bc32f5da66cb7b09ba130e9b974f5cc148f0bb94b1360dc
SHA512599ee7c125cb3378d59dcc75d70a91fb32bfb84fc31fbe3718b051f44352af006470a3b8d82be6134b743aa96654c1cddd4ac91009bcfbd8238947c8f9148449