Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 09:11
Behavioral task
behavioral1
Sample
2fc583f1c0d9b51fffb52964bc8c39b5_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2fc583f1c0d9b51fffb52964bc8c39b5_JaffaCakes118.pdf
Resource
win10v2004-20240704-en
General
-
Target
2fc583f1c0d9b51fffb52964bc8c39b5_JaffaCakes118.pdf
-
Size
82KB
-
MD5
2fc583f1c0d9b51fffb52964bc8c39b5
-
SHA1
037a7ec50e0813b77af9e3611387225a337f5c1a
-
SHA256
6cded58d0aa4963d62916f6ac2b5794b6a034e3bc041265a7114e3ddee1aaac6
-
SHA512
41946cf5cbdbeb9a6969eba7549217cd2cf024161b8769094076cf020d4a2d30aa985356580525e02df5eb48b75c60466b43982085310b048dd877a642757a58
-
SSDEEP
1536:+3Hf8ZGD1VZdl4YadnE9TUE5mKDX7BvrzSMJ4Ea4Dt27P/A0z3JiEyW8pOGFxfLC:KpBl4HnwmQ9vhJ4Ea4ZgP40zkEpGFhLC
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2752 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2752 AcroRd32.exe 2752 AcroRd32.exe 2752 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2fc583f1c0d9b51fffb52964bc8c39b5_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2752
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55932567d6f141f941d047a00ebf8da9d
SHA1d3e69a8a348c5c51c17aaf1198b6986a15784070
SHA2562587ea034c18fe8408ac75df3f721ab4975eec0b35755246a9ce4f335d5e3667
SHA512e9a5b08a43cbd94f692a5d9e9b98cea4ad6fdc7be53e3a02ac5bd7a74cd39cd5b7e93d9d48623084b19418694466fecd48290c10b50c2b1fd9b70b80124a730b