Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 19:04

General

  • Target

    2a4c018eaa81109f157cafd1bcbaa7ec_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    2a4c018eaa81109f157cafd1bcbaa7ec

  • SHA1

    488cc9d042f010f5286148efa71de129fef00f12

  • SHA256

    74daabbce910ccc1070d2f7e32f7acd0a6d63513ca97858ff684c7e9b40e1253

  • SHA512

    bc5c1de8c0c354572b955a25b17222cb2767670c35b746aff435f1817fdf4b1ee51ea87a670f0112d7e273cf6413a1c593eaf8c5536c22ca5694d0eccbe84687

  • SSDEEP

    1536:AOvOqhwuN1R6DrimIeSyyDf6LZp9mlnQhF9XWJMjE5QYBWapOtQlxP2T:2q51OWpnUZp9mlQL96MSQYOtQlxi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2a4c018eaa81109f157cafd1bcbaa7ec_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f32efe75a0c51bd0ce1f81c9018c31b9

    SHA1

    0675c839ce18c22488235a51f2ee92109e897568

    SHA256

    5733573e0f00665ae9516440a23e00b5e47b521d3e123785f9840d615d7b8db2

    SHA512

    33ca8179dcc63987e85f93ede518a3168de46c6f512802637d2e3f1dad04582f4ee31935ce0c57459894f1c8652f910659fd49e237951f2243279f472f5a0a96