Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 10:44
Behavioral task
behavioral1
Sample
5b99715a8cf27b02e2bf0a3f74812225_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5b99715a8cf27b02e2bf0a3f74812225_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5b99715a8cf27b02e2bf0a3f74812225_JaffaCakes118.pdf
-
Size
78KB
-
MD5
5b99715a8cf27b02e2bf0a3f74812225
-
SHA1
145e68faa2d2fa91074e2465f63302b64411f51d
-
SHA256
87fb46ccdd27ee6c17ceb4d9a0202589a29ea2c1c29cdd10bf3ca10e221c2233
-
SHA512
76ad8cad0c66827093b73e8cd67a6353813a868853fef266d2166e4786a89a408fdc5f9fe483029a042bfc048f034ebb63b633f1e303c3942ec4d48cbf58f459
-
SSDEEP
1536:QgrXaWcYfub/3X3yAGs18iyn+Ev7iZhB2Hw6vURHXFH64ziLY+GrpHO5aq9/HW2:LqW7w/XGsg++ivsH/v8164ziM+gYV
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1596 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1596 AcroRd32.exe 1596 AcroRd32.exe 1596 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5b99715a8cf27b02e2bf0a3f74812225_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1596
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD58505a025a231c8f12870d7ca5fc2f427
SHA14d493ec0b4972a3d01e8f1a1038853226c000559
SHA256bf788ffab5ae5f1edf3cf24e776f429a36378ade37bf5d693928df8576d0c641
SHA512f2267c3869be37e2c7d8ce9fe0cb947e36b976ae41f5f16565fa5398b86a0e9585a0619996aebddaa996674d3abf65dcf979b202e17140ec50b0f98b8bcd5119