Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
23/07/2024, 14:28
Behavioral task
behavioral1
Sample
67f1a44807242872019cc2ed55c5b295_JaffaCakes118.pdf
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
67f1a44807242872019cc2ed55c5b295_JaffaCakes118.pdf
Resource
win10v2004-20240709-en
General
-
Target
67f1a44807242872019cc2ed55c5b295_JaffaCakes118.pdf
-
Size
70KB
-
MD5
67f1a44807242872019cc2ed55c5b295
-
SHA1
6c98fb88219483c46f96307ee650fb983b10c199
-
SHA256
4c1a5bbbfac4ceffa9e7035ccfe9dfeb68d0fc76f386dff01261aa22316bc814
-
SHA512
e348a9fe17d9bc3284d771e18205adfb4583085e590f934af814d9a1167db81d705bfea3b909fed3c9baa2b5216795cffb671691e445a1e578e5863c781b012d
-
SSDEEP
1536:VyTqe/WxEeV2YD+uXh1O4pH1AMUYN++Q67YtlN+dZvWRmaXWQpOCItbD:sWxyTuxBbUYNgYg3+bTaCCsP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2976 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2976 AcroRd32.exe 2976 AcroRd32.exe 2976 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67f1a44807242872019cc2ed55c5b295_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2976
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD593cd85feb64b7fd6c950cd787eacefc1
SHA19866792c7f7a6d7f165b2dd821075ff186280351
SHA256b36bb1a4854ae8eca6fda7b109d09439f11a698ad83ada265f0e63343a45f75a
SHA5123db50699cd629e53147def7ac965d56f2357cfed41dd9dc69e802246b8dcd860cfd87615fc7bc7b7b863b78210f6be94fc5f8465bbc99935f99647b2e469f22c