Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 07:36
Behavioral task
behavioral1
Sample
33d132149906f117cc0b94d3ca025077_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
33d132149906f117cc0b94d3ca025077_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
33d132149906f117cc0b94d3ca025077_JaffaCakes118.pdf
-
Size
17KB
-
MD5
33d132149906f117cc0b94d3ca025077
-
SHA1
fa1a8fb6186e442f1e3291a31669b7efc5c1fbef
-
SHA256
9da3c8677d453ac8a193566a03804ddf956dbdc8b26c687a82cafb617740416e
-
SHA512
9b0772f3bc8d39dfcaef064f0b0837334a1c54542bd96a6e05e2b0b4f083ab5138fc6542636fc83a28a3d6f0455a306a151f85c6cee85f34c9bad9de981214e3
-
SSDEEP
384:vPV1XSaV+p82B6JsLTUSIoGHA4QK5e9omprgd+Si5Vm5Cf09JGGYq:jl+ppB6Jg0hkuYcd+xrM7
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2236 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2236 AcroRd32.exe 2236 AcroRd32.exe 2236 AcroRd32.exe 2236 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33d132149906f117cc0b94d3ca025077_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2236
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD570af994d700cc57733d6bd8253d51e7e
SHA13bc4f9658400f163dafd2714bb8809b3bee58376
SHA256f1bf696e5901da2288b554fdc926070fab07a4074f069f2fe5a1f2c994ae80d2
SHA5128f8241a8ac1a571b1cb65ed05f091b596e3cf2c63495f6547bf6faca68b4dc6128e1b8c44308f5d82b2a1b75b05e6864f61793f7a86bca4cc4252bfa5e563b89