Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 19:31
Behavioral task
behavioral1
Sample
1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf
-
Size
74KB
-
MD5
1740b78fefb02c033ae0fda052001116
-
SHA1
d9620c18c0baa40a8655f4ca374c45f85d71f932
-
SHA256
36692665fa81197a7121821e8df96194b3dc4b4d251429c70169b536fe37c53e
-
SHA512
2d3830f19f3172514d6e0641bf33b458b6e77e02b43f03d71f9dc45651bfe98c9f67abb5f22910a919ef3d288e2e884769700743d1e8393cf69e291573bc8127
-
SSDEEP
1536:cHBCOUSLIy8C23d2s84pVptaRnYZK5MlWspORGWnMX7uO/ek14128W:FOUqIy87dkStaqZlsRW6Fk14k
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2192 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2192 AcroRd32.exe 2192 AcroRd32.exe 2192 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2192
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51ca3177d53cd1de61f3fd66d2e7bb4aa
SHA1bf37f1a80e11b9bdac01e9d5aef9b9a6778bfbdd
SHA2560ee5f38f7ee11e8482358cf18a7d5f49383b966284088945bd40995ca3b6f3b0
SHA512ef4f719714e01ae7716c1f5dc9050cc3ad766855152a1668188ad283152835c5b7d54b7c98f617c2f352e112d3c5395d3a692b79ec29d6f4fc039b1c3fcec794