Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 10:15
Behavioral task
behavioral1
Sample
3cf7784981a65274bdbeb37e493c6ee0_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3cf7784981a65274bdbeb37e493c6ee0_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
3cf7784981a65274bdbeb37e493c6ee0_JaffaCakes118.pdf
-
Size
80KB
-
MD5
3cf7784981a65274bdbeb37e493c6ee0
-
SHA1
4fda05f85f5b427bd0a936c4306f46dbea6d40b0
-
SHA256
fa4b1924196a7df22f1c78bde688890f31ee66fb8a67a9a7fd2fd06f385e8171
-
SHA512
a62fc62a688eda7863d79ca0e745656bac7d00bc585cbb24ee26c68f19a56f5e664e96ea71f6055b56c6e422367aee243280bea6c8c9e94d2cf5f76fafe17552
-
SSDEEP
1536:D/52baRdLfa1xg5QGPBSfIFmX6C9ND5xvWcpOm9WhznLHjZQaR:Ib+pfa1xg5QqkgFmq+N5x+mmnLHjZ9
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2604 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2604 AcroRd32.exe 2604 AcroRd32.exe 2604 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cf7784981a65274bdbeb37e493c6ee0_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2604
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b1257ea1cbb7f84f8bf58b77f6f69d35
SHA11157dca6b77152ea0b57956f6601bc5117cdac03
SHA25623aa4cde0f51a3520171016a15e4fbd95382ab5465b2ab4847440a1184dabc8b
SHA5128c03a5cf9dc64eda5e7ca613b4e85755e9ad94275daa58ca3c7377e9da7f0ba07abb2dddb82465af3e77ea9dbb4aea4dcd626a0aa14cb2717c8ea36eec461ba6