Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09/07/2024, 16:51
Behavioral task
behavioral1
Sample
31334565cebc28c49279fad7bc784b55_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31334565cebc28c49279fad7bc784b55_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
31334565cebc28c49279fad7bc784b55_JaffaCakes118.pdf
-
Size
89KB
-
MD5
31334565cebc28c49279fad7bc784b55
-
SHA1
98c92040a542ead90dc9b48e28bc616eb41b21a5
-
SHA256
930790d992cb1fb0b1a73a231152d6485a24a616f749a5dd687bb4be8e7f46ad
-
SHA512
cc8eefaf72eefdc79719bdefe2d044da01ae47928da00746bb85ad65462ac69cab87ff0c2adecda2e196a6b8fa4d8504ae1eaa50f071fd7cfcdadab96674c8ab
-
SSDEEP
1536:kiT5N6YmtVUFsOf5t6xhyFpZnHrHcIKbXFgSRD4WQRybwVjgUYpWspO2aKSr:7sYm/UL5sSFznHbcIKLFRDmyMVjgLI2K
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2560 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2560 AcroRd32.exe 2560 AcroRd32.exe 2560 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\31334565cebc28c49279fad7bc784b55_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2560
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c5e22591792366ccffe7135e4e3bafbc
SHA1931b1e1d9897199b09e7270079ff8a1f54b772ba
SHA2560cfd7316b4052d0644b3b46a50d84bd40cdbd8c6a9c277b320b3b065bc880bbd
SHA5127af025aef23a7d6c49b39c8a07c878f46d9dc278603ab0fc32af2b5885f7738886e6cc35ee043a65e578cc593a1e1abb5a0814884649122fcce6094cf8ba95a3