Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 07:48

General

  • Target

    00c543758ac439cb7bc388760116047f_JaffaCakes118.pdf

  • Size

    68KB

  • MD5

    00c543758ac439cb7bc388760116047f

  • SHA1

    d43bc5ada86e57873ee4a2f9a4275362c39bb942

  • SHA256

    76070abf56ef4a7ce04146d98495e49874b2eaa7feb24aabf8286eabf6074f59

  • SHA512

    28458c64bfb445320e4ae1ec3adf81e0f9a8d491198a0b35d0c0eee88d549c2a7deee22b33b413a30ad07bd8b3f49d1b4d78d094eb82cf6940c070fbeccf0cc3

  • SSDEEP

    1536:G7JLmQr9gSZJmOHfp5WuLr0ODpUX1qOotKX3bEAbET9WapOtQHWb8sNMXa+54K:Y8UDhWuLYODpUcOoM7EbTCtQa0aU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\00c543758ac439cb7bc388760116047f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2764

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    94aa4c0fc89c9bd953f365ed13c035f7

    SHA1

    e77bc78f49d8bafdf416d839a93a400a1910b82c

    SHA256

    ec49fac17b105924a61508644b224e73f928ce287a23d6fef37e8f98c3b420c9

    SHA512

    420de138d99c319520fc0d74e97db87cccd6e14b064c1ad67d83ad358ed19c7c5fccfba7b393589bbccaf3de8da8441de79c8c7a514e6455beb1032cbee1cb23