Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21/07/2024, 21:48
Behavioral task
behavioral1
Sample
6188095438f6af2e23aec0b9569fa598_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6188095438f6af2e23aec0b9569fa598_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
6188095438f6af2e23aec0b9569fa598_JaffaCakes118.pdf
-
Size
85KB
-
MD5
6188095438f6af2e23aec0b9569fa598
-
SHA1
9ad0bd773b0e2f4360e49ca9b16681f37eda1069
-
SHA256
62670ebe3206bdaef5e77e6443383a8b02b2d5e704263001dfabc8f72ca50188
-
SHA512
0b5bcaabf1869b4d20adab46c4611c58308b1300a46b8f198629c10c146268a6d32f9c1ed5c2e109be3a6635536655eeb12ba7b726658847d73fabeaa7cb6929
-
SSDEEP
1536:PM2wrSStgj4oS9Om92uYI+EY54bRocooJeQfbhvsjeW8pO73WMRABk3ZVcnPj4pk:PWSog3S9OKdwEYE+cooYQzhvu7VrZq7V
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1952 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1952 AcroRd32.exe 1952 AcroRd32.exe 1952 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6188095438f6af2e23aec0b9569fa598_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1952
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD51f3a059fb73df6eb630d74707ee47d39
SHA12f32b5a4907dd83fc0e2cf16bc60f33b925b33a7
SHA256686d8f35aae6bd627898fa2e0feec18233b64450bdb53a0eba185204958a59b7
SHA5120616a41317788c4e9dee5c71ba166bf6817b39d7d4979c609488fe0f569c840138eb10b651d295831d4abf31cf8a77d004d947dda211765e61dfb39eec325c18