Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
26/06/2024, 01:47
Behavioral task
behavioral1
Sample
104fec9911192ed25c7fbe60f952153d_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
104fec9911192ed25c7fbe60f952153d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
104fec9911192ed25c7fbe60f952153d_JaffaCakes118.pdf
-
Size
87KB
-
MD5
104fec9911192ed25c7fbe60f952153d
-
SHA1
2a315bf5c709d12a8b9995717e5d01209a5e5220
-
SHA256
e5bef401cd37a430689a2df60790249ed70a51c8ade6e5a64aa56d55f8013185
-
SHA512
d4a76bd1ec2e3b03d617fc917806e32a282422fa74da84a9e629f3de0cf5f22343de97d99ac7411dec7e5b37ea499de72f6e7a3839357d332d7ceeac1302f3a1
-
SSDEEP
1536:QvdzBhvmTU/XulqsiHSleA/dQFXyX0R4zo5yusliq5M74FZnmVYi8cW6LB0LDAf4:cdzBhvmCXu+HSNlQFo+goEn5FZMYi8mw
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1844 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1844 AcroRd32.exe 1844 AcroRd32.exe 1844 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\104fec9911192ed25c7fbe60f952153d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1844
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5729afd58bb3bae7ee113cfca25883749
SHA1e76770de7bb4215eb84544d941bb0ac1a36b3cb1
SHA256d336362d598a9c5652bc9573b7f1867a59b222f92475057a44cc787bdbeaf8bc
SHA512c8bd5f23cc2cd7763e8ab748b7d2497ea24d46cb14850bef743ab9d673afffd4f1753f3bc1012eb414937a4a6be5c9fc5a7f2705196611d10039087810893a60