Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 11:34
Behavioral task
behavioral1
Sample
45a3405f235200033a0ced409d15b164_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
45a3405f235200033a0ced409d15b164_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
45a3405f235200033a0ced409d15b164_JaffaCakes118.pdf
-
Size
80KB
-
MD5
45a3405f235200033a0ced409d15b164
-
SHA1
b6ef5ca89eb91fa0e4ba648f01a634b5b149e9f2
-
SHA256
d307a6394db70efa6ab638d1a7f9b66cfd9c5e28d48d5387b22cd2cf3ca46866
-
SHA512
47e6113a5cf7f943bf3c38e2f332c4995edbaf7e7a4b24575d25d0627ce60c8a23c03ccd816593cb6cb2f27a89e7cc0af8047b774a0f46238cde65abbda32184
-
SSDEEP
1536:hlGfmI4GurwIYIBKMDw8u0y0vvwS8DiS/k26ehWeEpzEqWhQOwXlbn1TZLIuW8pB:ZI4GFaSRWwSQiS/zhWetQnXBn1T9It7y
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2764 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2764 AcroRd32.exe 2764 AcroRd32.exe 2764 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\45a3405f235200033a0ced409d15b164_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2764
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD55efc818b20ad68dca22c1455e19aa532
SHA18ebc458925053bac14999124b3252d9e2a29b4a7
SHA256848428007b35f2292e87c1cde4dcb12efb7fe75d4669459ebd9f7976416d3e5f
SHA512cd901d5dbf8fd9eb51e10c0679216f70115703ff036408d52f310c5b851b717e7189cc26ab7f954f126d3a62f778389b7b41d194a5fd2127f0e9267b017375cf