Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 14:59

General

  • Target

    08a1e596f02842883fe2ea46535fb1bf_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    08a1e596f02842883fe2ea46535fb1bf

  • SHA1

    6c20e298c20899bbe2e9ad90ebccf2cb3917ba86

  • SHA256

    0365ab63b7dd57ab80d073c6acbfd46b5b0d03734c947a61839ac2a575472316

  • SHA512

    6353bbaa62084f92998c55cabb199c79f5285002b3917f89417ba4f7d28bb6c9ff13b19389de58130aca30c08e41d8575b6514d7c985b78b251878ff3251edd4

  • SSDEEP

    1536:c7SI2idNwAhOeIfycnRRMdorRC1AFAC9fRKWMgz151RW8pO7CXK:PIVdjn6RRBC1AV5Nv1I7H

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08a1e596f02842883fe2ea46535fb1bf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1260

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    84638afa4459cf27000f8acb5c3aad30

    SHA1

    92aab621ce41c29363736df3a631085d3086bc32

    SHA256

    9169145bfdb353f815248187837d76d6899a9a53c1bd5434e5423df4c4310ae5

    SHA512

    512d09622787fced9954ca8b34ef2d3bd04f7ecae0e0809969b84cce64280161060836d970fd40698b4ae1eb09fdb98ca5c1df727d0b460490a517a172bf52cc