Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 12:28
Behavioral task
behavioral1
Sample
6798e0ec89c1942045d11fe70c09f688_JaffaCakes118.pdf
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6798e0ec89c1942045d11fe70c09f688_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
6798e0ec89c1942045d11fe70c09f688_JaffaCakes118.pdf
-
Size
80KB
-
MD5
6798e0ec89c1942045d11fe70c09f688
-
SHA1
bd0874d16f1085f60ef000f11b933d8e7f3a9583
-
SHA256
3d0709cb7b8b940b05d97fc40c87a007c0b5a1402cfaff79596aafb9abcedf39
-
SHA512
b66a0f9e973862ea4f25e3738486ee6a51d407b2707888eb12de17eccf18537d8d4caf4d3e06026fb06a87e3b7f24435ae4a03a36b42df0eb9936df3de5568ef
-
SSDEEP
1536:eDbsM6TJ6LuxKK4twrRp+Qi3Vy57k8W3qF1RLLouaU5dcWspOR8dTh:04eLuxD+Qi3VyYSPLUuz5d3R8j
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2388 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2388 AcroRd32.exe 2388 AcroRd32.exe 2388 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6798e0ec89c1942045d11fe70c09f688_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2388
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD50afacad465e9d6fcb2c10e649a5c7690
SHA1e1f6cf91f81f9cf370e21bc76b3efabad7e1708e
SHA256f7af87539e434319ebdcceedde9ccc5845e5441511750b694aebd8fb58ac6790
SHA51251a783b60d23354e745d1287d82eeae55237559fb6cc6cf1b5d4be636946ccc963aaa40c12bfecff9adedb6a9750ef85989cbdc8c039e2837aa91494f77801b6