Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 16:26

General

  • Target

    26e06ef92541a1d8f954e84a34497d20_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    26e06ef92541a1d8f954e84a34497d20

  • SHA1

    fac7932692cd7faf11040cb09f595606f2dc51aa

  • SHA256

    bacd5936f581e7497a3ac778a19d6246e8da0fa79c94974b72716f133cc152ed

  • SHA512

    2a0c8988dda2e448f4e877d9e487a11b1f18c1db61df50e01dc3d4a95119243833795d68097543ea1e3eea540bc6b79f01f4aee0b884f5004fc3df6694fdd923

  • SSDEEP

    1536:utgbH9tzuNic4E1i5R8xQT5s2sW9gUASSFIKWGpOKBnpw/FWqYbPdJ2eBb8r:KQH9tzuIgi5CQFsagnLUKs/4bX2mA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26e06ef92541a1d8f954e84a34497d20_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1524

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5dd8173783e8d934f84637b866616019

    SHA1

    52ff60dcc3920a6dc2f6f058c748afba3b302df7

    SHA256

    0e47255394dd11f7651febda1adb7edf83834522481ff8f6b853b471426bae2b

    SHA512

    9f20ca919708b521f0f40ff5bd897dc881dff132dcc8fae151be079fe8f97af3b367bfbeaf1620fc0b724faa41326fbaf84112dc395754cbbe9efade1f3d2589