Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
20/07/2024, 01:04
Behavioral task
behavioral1
Sample
5e6f97012e115beb93a0d4f326997ce6_JaffaCakes118.pdf
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5e6f97012e115beb93a0d4f326997ce6_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5e6f97012e115beb93a0d4f326997ce6_JaffaCakes118.pdf
-
Size
97KB
-
MD5
5e6f97012e115beb93a0d4f326997ce6
-
SHA1
3569408dc4b472f57a4079235731c3dd12e8e32c
-
SHA256
14db4294324081820e7af9ccc6c9e7ad1a3e342e00c79a4f5fa175cd2f0e729b
-
SHA512
a84ae8dd30d3b6a9d5332c4454416f3218a64e61014400ff16d4d2b5cb8155060036138607d5772b12ecab622066dafcdce88fd6014a2dfc1b121d78dbfb1214
-
SSDEEP
1536:MyX1CN13vvcyO1FdGdEQn8IyXZ8yxTzwjU+9zFjdr831C+Z5vwHIuBW2pO2uWJaS:xl8v8ZGd/8VHoj99WqouO2Hys3BHjYk
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2312 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2312 AcroRd32.exe 2312 AcroRd32.exe 2312 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5e6f97012e115beb93a0d4f326997ce6_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2312
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5bb639d12be0f497de52ecd188ec0a754
SHA1089d8cc55c589024b7650e46bdf13d747d271edd
SHA256037f2d61094a84add50341981edcd1a66851200ec6541b427449132f65e8ca48
SHA512c38a803ca2188c575a26bbca194fcf2dac2622d49817901408c7c0c19d0ec6af285204723fbc0b58775bc8578334ca96f65432af3964bf0de021c395e93602fc