Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 04:40
Behavioral task
behavioral1
Sample
2f05812abd5b24d271c259dfdb370e2a_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f05812abd5b24d271c259dfdb370e2a_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2f05812abd5b24d271c259dfdb370e2a_JaffaCakes118.pdf
-
Size
80KB
-
MD5
2f05812abd5b24d271c259dfdb370e2a
-
SHA1
63986ee958286e54adfa327f4fd35811a63105bf
-
SHA256
7665f900033701d7b28915e900224e06e1c49360f18e04462bfa798f854325ec
-
SHA512
84d6547b014b1811769b407eea96a76967aac1a14582c6e969d56d4291c7bcb1d35e0798b3d78b689c96dfaef59e3c687dae26dfc7e1ed00240607ae5c239061
-
SSDEEP
1536:nEoYs8fup0EbcXQFDoocOvW9ztKl/PMxCh1MzXhW8pO+P2J:bYvu0EbcXQljXUtKPMxChsXA+A
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2136 AcroRd32.exe 2136 AcroRd32.exe 2136 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f05812abd5b24d271c259dfdb370e2a_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5fd4a784e5108884d220b7e2b1fcc8278
SHA1abe1bbdee4d8f331e22be6d6b3634191cb554ed8
SHA256475798c0c732bde992e3d3b7fdfbf5551c4406a9eba5f4aebd013026fdd6ebd1
SHA512ffa186939ffb4edfca55db9e77ea850b73ca606794d277d5cb1efaeecc9778a3481af633391ee785d9aac3e79ab249bef29a6c9de815541c7d62cb0f95aadeae