Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 15:55
Behavioral task
behavioral1
Sample
4a5d7f7ff5ccced2eeea52562bf0bf6c_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4a5d7f7ff5ccced2eeea52562bf0bf6c_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4a5d7f7ff5ccced2eeea52562bf0bf6c_JaffaCakes118.pdf
-
Size
45KB
-
MD5
4a5d7f7ff5ccced2eeea52562bf0bf6c
-
SHA1
948f0ebc803cccf966d8fc0b0c05f92744f92494
-
SHA256
ee7d25b068ca7ea676686294c02e477b676fde9e765c492233fd3c8805935320
-
SHA512
3c4ec85e87321ae583f7f740b87af1cdef5ff67121225a9bfe3d45745e98dbe3d3f2d07a526a61641e16efb2d35ca2c37bc7f27251beea6e2b867e9e498052ed
-
SSDEEP
768:jgGzpDLpZKyJUBbAYeZ2rSxHN1x9cGy4YA99l7ofAXYRd2OaKGYacbrkEyojS+wo:cGFHpFQZ299IAUdvaK1gEPo4VOU2b2yW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2240 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe 2240 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4a5d7f7ff5ccced2eeea52562bf0bf6c_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2240
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5c4043b86cee7f16c2703b9c646bf538a
SHA1d3ad0027d584dc2873dfa41d2c0986a672580535
SHA256ec82d8e08e6cfeef1e059cb73d78e708691be1868a60cdbc43fb6e14d9e6db68
SHA5128763dd42d51a1d39ca19ccd3935cf633fbcd47cd53a81c7fc06296b89bbbdca5c687f6a2b0083a94e81daeb35be0fefcb2c073529a2320801fda10d23f01195d