Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 23:43
Behavioral task
behavioral1
Sample
474b45b3d93764847c4a902237aa9418_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
474b45b3d93764847c4a902237aa9418_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
474b45b3d93764847c4a902237aa9418_JaffaCakes118.pdf
-
Size
73KB
-
MD5
474b45b3d93764847c4a902237aa9418
-
SHA1
558bfa01e4d66ee8a47119c482bbbc9bb553f121
-
SHA256
1f3905e7e111fec8fa1bec63f06e908e295a5d423737a3c133790b71066fbad7
-
SHA512
19ca049bc04054e56d5cb277bd3f6a42c3066fa36327295c886bc973a5add5abb69d19e8727be07014e48e461c9788593b31ce9016ca91fa47aae9eb5b6f57a9
-
SSDEEP
1536:Vew6KG86zEGcvzz5xZWGpOKqrEojWW7vxM0PoKhwL7sD5rnziJ:Ea/6wGUzz58KoEojO9L4Vnzo
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2024 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2024 AcroRd32.exe 2024 AcroRd32.exe 2024 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\474b45b3d93764847c4a902237aa9418_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2024
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b241596cc32c4da46b308d4537e8f615
SHA1dd5d16e577ec425fd5c60e17adbff80f43a2ce22
SHA25658687ff0bf63800f3b86e3527893904993f20b05436a4275004a6912c836fa61
SHA5125e6d8fb069f1be15eb6f96c90bfeefcc9500c498d77fddb5cb868fd4355a6640c2533e25fafb9252472fb9d13b8fa0d22a5b77b84e3f16733c2ae8bab6c4c675