Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 12:40

General

  • Target

    05d75d076340f7c60a3e408fa8dca8c0_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    05d75d076340f7c60a3e408fa8dca8c0

  • SHA1

    20583af391080c5eab99d8c61ac0fe6d49e1723c

  • SHA256

    6eb99d408c9abb8ad23501e3b5bf3038552bc3110e58b24d50e1c2342a3676e5

  • SHA512

    b33b15d0e0487843b13b120e5ac53022aa2bef5235e087356ac6110cb95aecf8380985fb874d2e3cdc4dd9bbfdf3a3ffcdd2ddb74641791672b9451e4ac47eb9

  • SSDEEP

    1536:kp0CEjFMDi3xDEzN0sepKf6tS3n9qLJLPo4oW2N8MKVXw3ZWmpOShKg:o4MG3xwRCpKfn3nkNLDklKVXw36SD

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\05d75d076340f7c60a3e408fa8dca8c0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2888

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a7960d8fb1b51845ccc39ef3edcfbae3

    SHA1

    c1070de87c11933c11df4ca06e3ad907dceb1e1b

    SHA256

    47b1b2a74954fcfa5391f8b6ed9edfa771f7f1b18552b8b980771a0a8cc57ea2

    SHA512

    598ef0f81a965b5e56c3b7194bc19aacd227e4c6d3d84f1cc6241fa6a199cc2842d51c2ff1c6e0ef627213cdf69549dd3af004c46d95a6a3dd9a10ac347fb17a