Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 02:18
Behavioral task
behavioral1
Sample
2aa4e46aec12aa79ffdd124f2bf00347_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2aa4e46aec12aa79ffdd124f2bf00347_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2aa4e46aec12aa79ffdd124f2bf00347_JaffaCakes118.pdf
-
Size
88KB
-
MD5
2aa4e46aec12aa79ffdd124f2bf00347
-
SHA1
4bb80e297435932ed924bc46d870f9c1e6bfc944
-
SHA256
f4398f401e6920ea5fba6ab085d3f9448fcff5f2c2cab75e82c048d6f719b6c8
-
SHA512
f3671b104fa32bd3d44827d9c0f05c7ec7a7625452073a6d266c731f6a1d6bdb04120ce433dc604323a41641deea51440a1cb41e6389732fe5ec1e77e436afd7
-
SSDEEP
1536:0IDPHrY4iSHKeYXAEI37/ye2gb7ZbayuVz1q9RuCPWcpOm9WuMhqGM0Qwu:fPDiDjnI37/yedZbaHq98Cemmhxrq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2512 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2512 AcroRd32.exe 2512 AcroRd32.exe 2512 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2aa4e46aec12aa79ffdd124f2bf00347_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2512
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5a916ea9c7bc1ae93986e6ae2cf2d97b2
SHA1eaff873ab6f69f91ab1cb8136cb69cbfe6958c00
SHA256aab392fd60ad5a57c9e8762be6e573618a34041139d72f93c53b0dfda50eec0c
SHA512b58ea650352d33052676e8df33e5d1ecb6d19007a624e1ed1c5f15efad92f05a1b22a36028d714b8169ceaf1e397167a88eadcc90f34fd89b21fe48e87743289