Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
16/07/2024, 04:34
Behavioral task
behavioral1
Sample
4cd0ee71163c70244660fe380d1778ff_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4cd0ee71163c70244660fe380d1778ff_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
4cd0ee71163c70244660fe380d1778ff_JaffaCakes118.pdf
-
Size
7KB
-
MD5
4cd0ee71163c70244660fe380d1778ff
-
SHA1
973e266df8bfbbf97a4ef324d44a10121760b6e9
-
SHA256
5c6172835adc25f633c71fada8ad1f597ef466e51bfa12d6d4a2a04601fb5728
-
SHA512
5a8fa9fd78d85a83d1497efa0a98f6aed968630c633bf18de1024daf9c8110b88cb841d61743eaad78fc232ed168c0b92d14f44979be1bec4933b6f3883fc000
-
SSDEEP
192:bP5uFm4kugoxwgZLNtDAaqFp5vXdFeT3N60aLazP4f19nLmtvB7tjYL:bP5uFm4kUx5LL8ZXdk69ezPGnSt5RjYL
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1244 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1244 AcroRd32.exe 1244 AcroRd32.exe 1244 AcroRd32.exe 1244 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4cd0ee71163c70244660fe380d1778ff_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1244
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5028d3afad353d143e9879d876a30cb7f
SHA17f9dd0210ff4246c574894cef856dff5a56ae3a4
SHA2563abc10a998e089c3a2346bc6898a1354e875534c2e30048a33e30a0fd3cd8831
SHA5123a30cfc1216e123b564312dcaefe501ece5e1ca6f4770ff9e2692b93eb1a02480c3a67bdcb95ac962973be631d32244fd931099ba096d040fd976f263a2b1cea