Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 15:49

General

  • Target

    09a9c0619834766b89a2995a53bfb5ad_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    09a9c0619834766b89a2995a53bfb5ad

  • SHA1

    d63124b9ceaa4369e3104dfd1b92ec728ad04759

  • SHA256

    5f2b22c7aa895fcd0c225b5adadd9772d6673d668691b54b702190ae50dee373

  • SHA512

    75e64d02dc59d3d1a232f6feb874686ca68bb49111c9267b53c79a3552b8638f43b37cf1d1614d6434bba7659bdc990153c0f1b4ca7141184b77b44bde20aab7

  • SSDEEP

    1536:XA3PnXRpR+yiZasEv3qkb0HyUinnzu9bTWDoWSqEZMHbBhzWQpOCBT6:Q3PX5+zasqBb0Sx2WSwHbBheC8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09a9c0619834766b89a2995a53bfb5ad_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2684

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    05cc6055e0e94eb4d89199009e811836

    SHA1

    9cdf7eeeff7399484e58363eee9cba119fc9455e

    SHA256

    eefad33d3bcd550d49dd256f9603963256d284d81ffe270a362594ddc1b0d912

    SHA512

    bd44db12aef0ea8bb22cda837bd58cd1c38fde410f49a537b985f1bfa63c98df101705351e66c4bb1749c55d81a33d7483a3f4f4156d67402324b3de7cf7cfc5