Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
04/07/2024, 18:26
Behavioral task
behavioral1
Sample
25c98f619573d4385c6e3cc513e23754_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25c98f619573d4385c6e3cc513e23754_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
25c98f619573d4385c6e3cc513e23754_JaffaCakes118.pdf
-
Size
80KB
-
MD5
25c98f619573d4385c6e3cc513e23754
-
SHA1
90a9908741a58b1aacc6cf7e2586ad70cfec7e5e
-
SHA256
c1d3224c8973bf2f40200ec73f385e60ba63943b7a5899f25ede288ab22e0608
-
SHA512
9087a7fdf2b27925a8412857e85ea80ed85c1cc281cde15442bb9d1e79335da5cd74f92b515725607c956d78de702b0555b1e1bb6547e673af5500534c32b85f
-
SSDEEP
1536:eezz12shM2vfpGfnzQdHRa99pXhA/cX6g5WApO6I3uaQuWE2scmo/:bzz12shLGfnzKHRa99hhBtg6I3wvV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2180 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2180 AcroRd32.exe 2180 AcroRd32.exe 2180 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\25c98f619573d4385c6e3cc513e23754_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2180
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD54820f256175bef9b582b89c0a409df5c
SHA188d47f382a16343817adbf496444325bd9c96cfa
SHA2564327e3347d41b0d3fdc0a53f90b98e47939719a2df57972d6864ada7f1bc7fbe
SHA512ea8922d62b1f0d3e91becce9a0c154609d2fc93d704297c13cd65c350813fdea8ac02692c3440f4b0f1dbcd276899c6dc30e548b5a5520114b0cce166cc809dc