Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
28/06/2024, 02:18
Behavioral task
behavioral1
Sample
186edcc5a00c5c3be12728fbbeedcaaf_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
186edcc5a00c5c3be12728fbbeedcaaf_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
186edcc5a00c5c3be12728fbbeedcaaf_JaffaCakes118.pdf
-
Size
79KB
-
MD5
186edcc5a00c5c3be12728fbbeedcaaf
-
SHA1
99f8dd07c5882049c03ad621fe8f3ee1c57f7430
-
SHA256
64419714b359d0a8c0a5cc05c234224fcb2837a9a3a53ec4d8e66957d349cd5a
-
SHA512
8dec555c5c4079bac3b713033b3fa2cd9251970f2c41a6a89fba288a2a4916e57851f8de22890fb74ebf4fe0d89787496f9e0df05609c44e9415fc744b7f56bf
-
SSDEEP
1536:0InYcmCvA3Mq09cxnE8HOWDNdNjp0Int3U1qWApO6830NTd/Y:ZYcmCvAc59cxEANd0Intwh6y
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1668 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1668 AcroRd32.exe 1668 AcroRd32.exe 1668 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\186edcc5a00c5c3be12728fbbeedcaaf_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1668
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b7637a9dcd73b88bcbb896f8eb7b4f4e
SHA1a65bc4a24e5a194f92a89fcf78b92bbb687cc7f8
SHA2564446d0a7dde016a75eb3b14a1ee0e33a9ca788002b7f20c9b86eae3c8acdb213
SHA5120e4c4a151ef7fdade69301f69339ae795ed4f9ce073fda388d9be7dcf3d18c9a10a34294df5a9d76c2a2cfe651ea322d44177eef3da31663d7ffcbd2994be80b