Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 01:53

General

  • Target

    1596ccd4390760c3b3936ad40fbca0b5_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    1596ccd4390760c3b3936ad40fbca0b5

  • SHA1

    3e2222c76911596d2f6d07e5165f29ec0acfe3af

  • SHA256

    2999f87f3af46e2c0d07706887b0b38d988c73da55db5935e63807fba9356d22

  • SHA512

    a2fc074816c6b7611bd02674bfde2d51f5e063a60a32b6bf24527c22a9aef28de0200e1ed8db08037c9b6618c83428415c79910d6cf8b495d6336114df18cd58

  • SSDEEP

    1536:CLcKi0DpSzjPLDRhIG+t3ivXifTaFmU8Zt/J2YuW995FsETW6pOu2K41eqVAm:L09SvTcty/MpZt/JJD95F7Yu2KYeqX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1596ccd4390760c3b3936ad40fbca0b5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5f5f1f570162f7b67d43b9782634c4a2

    SHA1

    7a7d4eee8041836e8ef62b8821f306a717349c49

    SHA256

    5b99cfbfa26df477ec66d27aa13572893e4b0ec50295f055c26c7a328dcd50a5

    SHA512

    99566163a2f5c86ba6d28f20e5a1fc3d2c86cf89654898384b733e8ec025265086fe83ca5dba0595f6b134542898e344880aedb77b00e23ace1d2d9daa82842f