Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/07/2024, 14:33
Behavioral task
behavioral1
Sample
22b2e722ba162b5aebab80e7ee7e998d_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22b2e722ba162b5aebab80e7ee7e998d_JaffaCakes118.pdf
Resource
win10v2004-20240611-en
General
-
Target
22b2e722ba162b5aebab80e7ee7e998d_JaffaCakes118.pdf
-
Size
81KB
-
MD5
22b2e722ba162b5aebab80e7ee7e998d
-
SHA1
21475b364fb71a149509957dd22b980444eaee81
-
SHA256
93e23522179d51e53b609167f3fdd020c9c1452cf9f361b543d5ebfe337db37c
-
SHA512
b21c31c58e850ef5c8726461eeadc76e9bcbd9848a7b22dd1d8c6c58a029bd1f2dbc9f322d113459c827f501ef233d223dc98d97b0223d2ce13beacf9395c57c
-
SSDEEP
1536:c9VlMrW0U/tS12oupPtadlJfjXDyRLWu4/Wkz7rA7zpBdVWxApOGdk1:QlMrzU1q2JpPtadlJ7XWq9zg7zpfy3GM
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2732 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2732 AcroRd32.exe 2732 AcroRd32.exe 2732 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\22b2e722ba162b5aebab80e7ee7e998d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2732
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a043bcba94441ee254e9f09922d1774a
SHA1e45a6b0c53cd7b6dcbeeefdd974c566d114cc65e
SHA256ff522c4976c3c0fd91cffe24caf8558a6f1995091a0c782d6069aaddd5ebe54c
SHA5126b65b3649c6a7216b6a3bd9724b6bd8b35e7c4dfb4ffc87134cb8be7946dd0bea12e0b3305c78d19ad79c97176e8169b7bc4680e340bf46c58c8881cdb84f02a