Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 08:49
Behavioral task
behavioral1
Sample
40ff37bab2a07546a7c8978ad569171f_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40ff37bab2a07546a7c8978ad569171f_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
40ff37bab2a07546a7c8978ad569171f_JaffaCakes118.pdf
-
Size
81KB
-
MD5
40ff37bab2a07546a7c8978ad569171f
-
SHA1
b9a100885b0b4de0120ef66686af299bac980f91
-
SHA256
cd33f686b116e05041ac4d1183e7ccde955b8954fcff2742d963f9e7e713ef0e
-
SHA512
5900b39594eae1ff5d5fb518da74086343c68e3662a73cb44e132bd38caa1b93de19932f8899e900a048c080789146a75732d3c63e19f792e0d8167701529a3a
-
SSDEEP
1536:n/p+3Sbp4UxiA/E78awvT7b+ks6dipQqy9gb64yS9pJkW6pOu26W6aWib/+RzLgJ:R+3Sbp4UxB/E783vT7LK5y9QhNdu2PWq
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2028 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2028 AcroRd32.exe 2028 AcroRd32.exe 2028 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40ff37bab2a07546a7c8978ad569171f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2028
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5927a485d4ea227bb03225f968b959d07
SHA128097eab06416dbb9d250246e88e770bba10d9d1
SHA256536729a3a58c749006f508206f5da9ac0d2db7cc1a74082f20491ab6d7c9cbbe
SHA512a0643650639a94aba151bd536800d75c4c5bc1f4fd7751b95244241e4654eca357ba6345ab388c0ba46e817ef93dfb2b35b8a8c614a44be4a2d741387fd74092