Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20/07/2024, 07:25
Behavioral task
behavioral1
Sample
5f8f318022aa84410693edd7247b2c18_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5f8f318022aa84410693edd7247b2c18_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
5f8f318022aa84410693edd7247b2c18_JaffaCakes118.pdf
-
Size
92KB
-
MD5
5f8f318022aa84410693edd7247b2c18
-
SHA1
68b29217ab02d11fd1d3823653f22d78be29a931
-
SHA256
581ff7233ac860821fca870c532e5c2917f6574665e75c8cf058fa1ae22bffb9
-
SHA512
790c9e8cb1ae4d87d9bda1f5aeff3a209dece8227d559b874c8c82e36fbf8562712828df345f6ba9effe0a6fc5f1690e566b230f704449cad3f1a4e0191723f1
-
SSDEEP
1536:bRt0JrR8iZi0HLG7XCcU6oousu4y1Ac1mTJB5GG8HmWQpOC9jwyWLZny1aY:diQibqXCl6oou3D1IcHZC9EZoT
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2536 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2536 AcroRd32.exe 2536 AcroRd32.exe 2536 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f8f318022aa84410693edd7247b2c18_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2536
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5f1c01ac28b981347f767fad18ae93faf
SHA186bff500c9f2b0ddef58550af8ed418bbc9833b8
SHA25694ed414d3e209c71aea50a44d0a63ee8ae093a4fad435532ef8e7504a4ced7d8
SHA51218118b3ddcd7e6898f33e47e08f9417b0c046eb845fe003cc041f62eba21a9c8356947db4cbe9c8ed91d648e042921ffe0c71c825ea88060013181435141133e