Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 08:19
Behavioral task
behavioral1
Sample
254100ffe704afada9b3ef933177a709_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
254100ffe704afada9b3ef933177a709_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
254100ffe704afada9b3ef933177a709_JaffaCakes118.pdf
-
Size
78KB
-
MD5
254100ffe704afada9b3ef933177a709
-
SHA1
06f3e4a8d3b7588673be9e68d6221b76ffb1bb6d
-
SHA256
aa8412e7ac008675a04fcd29f12f72468ea81f3719f8fade06a7ca645b9e2a49
-
SHA512
5482f7d607bfcf62dcb62a4a67259704d5cf9d267fc374e66f1138f8b4afa5f301ad75b323894ab19745929353c31c8b26a45c5ac2d876421186a5c3cb5df3db
-
SSDEEP
1536:Y86GiazHfwk4BEqjE7qzX25F6W+AJZWNIDLN6hDJRlDsQAyWQpOCx6HMweu:HzHfCEqjEoX2X6fAJjNOJTsQAVCy
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2352 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\254100ffe704afada9b3ef933177a709_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2352
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5620e20fcabede0191681482f74a535f6
SHA18875abb21689461888dbc8864f71d280925cb00d
SHA256c35354193ca75232a624b30c1d5bbec1dd373a91df413279f86343062058f7c1
SHA512565c1f2a3ce70f4b2036866c5fee90f7d8ba22ea9ca935604aa96fe27b6a5fda027cb9dfbb5e8393be2f36082d53d1131432a4826c510e6ef1aafecc0ca75eb5