Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 18:45

General

  • Target

    0d3770001a39ae056643be4e8f6f7a78_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    0d3770001a39ae056643be4e8f6f7a78

  • SHA1

    128b5df6d689c8765c001868422706f77e73c1a2

  • SHA256

    ea6c5ac297fe713022262835c2c5028b5d0e37b7af9e2a2880a25c5edf4978e6

  • SHA512

    264d4249b3aeb1a6d0befee7ffbdac1b93ad7b5210082e40c339b0d7c0744fbe1788f81b14336875a4e18d35d68cd1c69bd2400a54c292a4789c3007b6786567

  • SSDEEP

    1536:4mZqoh4Z7WnIXIEFb/uLiGj6q8dQWWypOlWWxP+LemiOZyLOP/d2q:vZyZ7Wub8iGO90lDP+Ler8Y+/x

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0d3770001a39ae056643be4e8f6f7a78_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7bda1ba964c1db515080fd4e6941d144

    SHA1

    6ea1b5e579cb77769acb551f2610a4e8d182756f

    SHA256

    cae8dd99f998572cdaaeed729e2bc84500e62efe155a8ba68747ffc56e4fd1c7

    SHA512

    ee55893ca345d80edb75437511d0c722f3801ac734f60d551527e0e9975e1a085d388fab7c440d87e63e424cba08b751e2c44484f66d7c5f85bc136ac70eef8f