Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 07:21

General

  • Target

    1c0b3c8a9888bb9118cfeba76f8d26a1_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    1c0b3c8a9888bb9118cfeba76f8d26a1

  • SHA1

    b4976bc67c0ac4d2c9e24096bf586e558fd4d65a

  • SHA256

    cc4570806394f6a413a8e74c5b0dd5ac59f3383054bafcfc0ca8f76eb62d2c88

  • SHA512

    d3185987d8012bede3938b722af6b993db69b7aeac53badbf4a8ab0c35d71c5bd33f43853e2676233fc83a4c8a8b0e8991b3b402cac641fad16542d7235ffaaf

  • SSDEEP

    1536:ytRuYpGHrXu1AJ8eKdb/hjusCw6DwwOTSHzYECDaM91LO0kump/TWuI5np0E:kRuZHryAJcxuXZxO0EEC99UnP/9I5nx

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c0b3c8a9888bb9118cfeba76f8d26a1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c02826090ff2d4c59a7033304e069027

    SHA1

    98d889ffcfd5e42725cf60f7adfb1fd08deab6e6

    SHA256

    63728a9c731caa41fc8a489adcdc90183bdc2d7db34a75cac01b7c15829196b6

    SHA512

    fcced77217f2dec4d84a4709b3252c547adbe99c296447a788a39df3447e728089c09a18418bd1e9cf68da6301e7d3efa5c0e931dada5cf4e6a0d74b43e6d034