Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19/07/2024, 14:45
Behavioral task
behavioral1
Sample
5c6309b76576faa3b3970a5714bc59e8_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c6309b76576faa3b3970a5714bc59e8_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5c6309b76576faa3b3970a5714bc59e8_JaffaCakes118.pdf
-
Size
80KB
-
MD5
5c6309b76576faa3b3970a5714bc59e8
-
SHA1
aee5e2ce220d468ab11f712d5e5c469140b6ae3e
-
SHA256
4f9db75bd02c99d42f6a9fd02479e7369859a632572533c8972a6928cd3cfb89
-
SHA512
e8a72376ec0796c33ad44c1f42c1dc73b38bf2dc7156f3c13893fbd55907548e449370593f80dedb9ae5d148feacb70c65fe2b9043d8a3c83e8b4b0eb7089715
-
SSDEEP
1536:H4dkUYkQpGYVqKFayUrcMsLtmqnxwbhqaHWapOtQHW7ST6M65KVTCps10wNg4nn:Y4kSq5rAMsLtmqnxqhqHtQ6VMpVWps1R
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1976 AcroRd32.exe 1976 AcroRd32.exe 1976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c6309b76576faa3b3970a5714bc59e8_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD56690176812817b45b61b5914c167b55a
SHA1768c3468c9ceeb32e51de079dcc41a24565d7dbc
SHA25651521c18f16a12a0332c21e5d904f966085153407393e7ade0c427be8ee56694
SHA512ba9196b973ef30b16cccca50d37ca6b94ae2a4e25ded41575cf981f4a97d1f4d1bfcde7b9314500536c47990d9f7ae50dad8c85bd60b2c5206fe719d6019b683