Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 10:55
Behavioral task
behavioral1
Sample
301753c386e6be2875a0819db6739007_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
301753c386e6be2875a0819db6739007_JaffaCakes118.pdf
Resource
win10v2004-20240708-en
General
-
Target
301753c386e6be2875a0819db6739007_JaffaCakes118.pdf
-
Size
82KB
-
MD5
301753c386e6be2875a0819db6739007
-
SHA1
4343cd956af6ee549a45f1cdf67bf194090ca1ff
-
SHA256
a56e8f41777eaf7aa8e7887b9d285936c3b3950d09c3e1b7c195cb030b7462a2
-
SHA512
7f5a57d23c9f31f2785e0a87a32c8ab7d7ccd390b6eae21e213245ef12f55c8377a45009ea9fd41f80953bca15061aaf4f73cc27ed1afb2d80d4c92ab72abe80
-
SSDEEP
1536:piW1P/q+kf9Lvoyf0qpSR8bTwjqQWrUFk4WapOtQHWI+QdOc0BlImc0xG2V3wRj+:U8YL5HpSObTw2QWYkhtQcorYxVwRS
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2368 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2368 AcroRd32.exe 2368 AcroRd32.exe 2368 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\301753c386e6be2875a0819db6739007_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2368
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD594a0cabd1fcad809960930e1d0350e41
SHA1d31f9c114ada16a837d58ba22377e479a55e9876
SHA256994c2c4c56c4603410d28c1c7226f2df9ec06f03ac6be56833c8896c814a4a15
SHA51253ac88fdbd21bd1f9b112486bc8daa919f983edc5dcffd9a945f5f5cd2e8c760e3249d879f3d1ce306f2bc2b83e08c8746ed474687a90c778664837c152e868d