Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
05/07/2024, 13:01
Behavioral task
behavioral1
Sample
26ee1dab5f33e7b6f617651e265a1760_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
26ee1dab5f33e7b6f617651e265a1760_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
26ee1dab5f33e7b6f617651e265a1760_JaffaCakes118.pdf
-
Size
85KB
-
MD5
26ee1dab5f33e7b6f617651e265a1760
-
SHA1
b91d2ad23dda5ed8b25f2623eba7280577dd718a
-
SHA256
29a9a3ae7ad75123f71bbe9127de2fe59da5f720983e9c8f955ed8054d8331b2
-
SHA512
fa4a2d33accfaaf299e76853ec1b49b3da2001e30d2d547429dee9d36112555355823e0bd63329b6126fde0c322a7f7d9e617642c955b2daa9cd8f4d301a4627
-
SSDEEP
1536:h3kufGMpXpcCZMQKrN4KwiQmUgrYzJ2T+b9CD8DWN+0so5nZYRDWLRC9TeLN0FEj:6u+ipk54iQNgrw2CRCD8DaZnmReo5eiA
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1944 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1944 AcroRd32.exe 1944 AcroRd32.exe 1944 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26ee1dab5f33e7b6f617651e265a1760_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1944
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5623332bd32b956c0cdc6e6792040285d
SHA121f512b15af538bce63a692cc8e5d3f45b61a7ad
SHA256507f5d046fb50ce528b462e61b9de61413a3928e0054707e5fdd200ffcd0561a
SHA5124d1bcd1b13e07e78d8d2544cc7d789c4d8568aa34899756151cc6475946ed4500c076f8f050153b0673f4fa472619a72323c4cc14c92e72a2cd8b68bb25fe065