Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 14:50
Behavioral task
behavioral1
Sample
4a2380a3d4ae21f55a1ff56e608a888f_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4a2380a3d4ae21f55a1ff56e608a888f_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4a2380a3d4ae21f55a1ff56e608a888f_JaffaCakes118.pdf
-
Size
72KB
-
MD5
4a2380a3d4ae21f55a1ff56e608a888f
-
SHA1
dbc890c729822bc112bd661f7a52b9c1df85bbd3
-
SHA256
1fe2289bec230ad67cd259d09f47fdc0d50ddca5c81e6f71df64b42894d5ca7a
-
SHA512
65f5d39984a0fda93de08ee320ecb2a6a4c4079c5642b881c0360f65426723d87cb48cd0bd47f1bd6f9532c5b2c1bbbe611a30074fe4d9926741d5d02d289d00
-
SSDEEP
1536:juTOmDnF6tDaEMoIzD4XzMngyjPEQJJDi/y2pu2wW0uIWXpO/Rl8:Y0DE4zQbEQ+/y2pu2suA/I
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1904 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1904 AcroRd32.exe 1904 AcroRd32.exe 1904 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a2380a3d4ae21f55a1ff56e608a888f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1904
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5714ce185321c6d22fddc7c28bd8198c9
SHA1d91093b5189e3a2dea4c45983f4ba03a0806e29f
SHA2562d9b6017abeb7640d13171dc8816df3f6d2ffc39638a2899230bccf28890d674
SHA512867f34e5426f393f7191ff270a84da07bd17bb8f5d88542e464df954d6e386c3abfc01fce843e8dc89053361b4c10d9f1f40f32c0af1151305d3ce4edd260933