Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 18:19

General

  • Target

    0cba4592d584e1971180f6ae90a805ee_JaffaCakes118.pdf

  • Size

    67KB

  • MD5

    0cba4592d584e1971180f6ae90a805ee

  • SHA1

    7d6a1e808aecbe5e234d31f63a072bc777a776c5

  • SHA256

    fb80811a7dcc09e6797e2a244948a353d1476254dae372eb295516d8ea263efa

  • SHA512

    d12fe12473f0a74be82c6611625f2d8ed7a34fefb3bbd5f4d803c4e94e51f02a14ccd6fdb5e20191befa51d11cdcd882887c4406e76542f5a19c042750397ef6

  • SSDEEP

    1536:c4VlpHbDbxPxskbxIImRUGcwuYa4aT/W+dRKB8gkr1WapOtQ28pIP3:lnpHbtcTRUGSYjaTBRKB83qtQtp+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0cba4592d584e1971180f6ae90a805ee_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2748

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5782059ac31e6722e6a0ef03ec1e6fed

    SHA1

    7402cad9bdf0599bdda474524d9590780e155c58

    SHA256

    b249de092edce3c7d57e3ca45acec751276e99d6b7bbd587e493f1175cb9f540

    SHA512

    495fe46527e6c652b28b2181dad4116daa4792a19e5d488ef50f1c31c7f9a771790749d45e80f8a1950729993bcc78e331dee5fe58cb218ca00a571a6992b3fc