Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 22:45

General

  • Target

    11e0b466d52e2d751c6c80d43525b1fb_JaffaCakes118.pdf

  • Size

    86KB

  • MD5

    11e0b466d52e2d751c6c80d43525b1fb

  • SHA1

    c09acbb829ef98adf9221daba5486804af8c55b6

  • SHA256

    dcfdf3f8ea00db8269689a7fba24ec884a5fa53083a63fcdf2ccad7072da88df

  • SHA512

    e25e9c08f1877e953e8a2838b99283d63509e9dd8097110c04756f9e94a9395c89bd3b2651fa40d36cf7412e794d9ba1ab16e78c82b36d6b4ec8d67ed3067ba3

  • SSDEEP

    1536:SSWnfIz5KewijvEY9Hjj+aac1tmpF1rWWypOlWWxrRyb5cKBvlprY:T+fI9KeJjj+aKv1r3lDrRyNc6vlW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11e0b466d52e2d751c6c80d43525b1fb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2012

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    45b6435c8ab1cf72e6600a21554e3198

    SHA1

    c973a5eebe6278a2b90b590bc76128bc077945b4

    SHA256

    f163dec728c91064d27a4669df5e26afd898d513614e94da629c72beda3a31e8

    SHA512

    a4a5927a52409f5a5637d1aaa9306a317182d17e64cbccc8e631830c58878b41bcd9e0a9f031c7de4668174d92d1bd0f081acead76753b1abe96c16b9b6463a4