Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 05:14

General

  • Target

    195934686286346dcff767e953e30577_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    195934686286346dcff767e953e30577

  • SHA1

    b96919acda360253ea0780755fca4915c1e74139

  • SHA256

    b8a23fd966e43c7d4d81ae85b06cae4a75d355dd16e182919fa36447c5c003e3

  • SHA512

    c676c62aa265e66bf6b8945809da474bcbc5c9cdd6168176aac6551cfb770e57ae3af352ec2d9472a5ef3e36d7b038899a86663709750699d2d0763884e16959

  • SSDEEP

    1536:/h0mRQIbcy5B2LRo+O8WH5j9CNiDSHnWkNpOPEUsmcWGbBZaotLV5:ZXKIbv5oLRLO8e5j92iDPEUsmabBX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\195934686286346dcff767e953e30577_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ad9c6d2460ead2d313cd463a813c907e

    SHA1

    e5289325396335a0152d99db85c04cc07af23542

    SHA256

    328e65869dba6a31a902ced7c5d11f2f8e6f557932b6c7770d658f0e3042cc28

    SHA512

    10ed07790fdbcdc50725cdc2ea427ae8f40c37116a1b000dd4528c6258605fbe7ada560920965b5275030ad05a8031ca748afe88d8779c7a1351ff84ac95698c