Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 08:02 UTC

General

  • Target

    1ce44e7b11fd9bedadc6ca82eb6558d8_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    1ce44e7b11fd9bedadc6ca82eb6558d8

  • SHA1

    691f83e361198a64390173349aeba5802c33085b

  • SHA256

    ddbd69b855a51ba5ae1edc4ae20615b564c61a73ef12765b3e9f19d3cb4ae176

  • SHA512

    4fe585c2985497ec12d30a61ecb570e5e93d0765c9548fda3f3b1141f6e513316ab3bb6610cc7cd130e3e5aaea70fbb212c9cbe8c2df04104509466a0dfc415a

  • SSDEEP

    1536:dVG4MLfqpSgPzidaVEnpjLQwAppCXfIWUZBwcloWwpOSCwf05/Wk:apf+PzijpSpCvAl3SCwc5N

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1ce44e7b11fd9bedadc6ca82eb6558d8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1916

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1feb8d73741c9ab80dbdcd59e47f2aca

    SHA1

    57f026a95d2bdebc725e86005a5c46965c52feac

    SHA256

    a688290c64b0713e3e1d684bb3a658c4141fc11d67b912d2bcf1eaa4a23d6936

    SHA512

    b3bd0a54cb6d058a17e2449d579852083b636ef9045460ed769cc728be1b4ca8da22c7f20257c277332a18330959014f45fc2812a064bc5e199d28045f876723

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.