Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 23:26

General

  • Target

    c49dd26864a6515f9f9f08d9f600038e_JaffaCakes118.pdf

  • Size

    102KB

  • MD5

    c49dd26864a6515f9f9f08d9f600038e

  • SHA1

    3cae1cabf03669e5081ce2844c1e10e9928cb29a

  • SHA256

    b5d1633392a3500d6865550f8bf34e05bbf511009fbb22312b1d48350c04259e

  • SHA512

    de48739cfae2095f72faf6a2e36503eb88d4c6ce616ce9773c910a86f56a72337774c4f1e2effd42bea0c5090026c605241b7a67b238a6f6490c673cbc4aecc8

  • SSDEEP

    1536:00T8YFEIHYc4PPKjumc08qsLDP39mmRBS92smIFCgti5m1zGynb4Wx1n4H0iW8pP:BTvYxmnPsLfRBS92s6gtic16OReH0N+r

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c49dd26864a6515f9f9f08d9f600038e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    de478c713597b1541e2e1324694c8e0d

    SHA1

    01f28a2f859b8fbcbc6feb186f76402129a7558f

    SHA256

    9bc8dfceef6140653e97aa4366096c1657010c74453f389bd7882c353f5b48ef

    SHA512

    c7d8185bf535ba31c1a16fb1989c3896001687a1e868490b997898c5b3d22622ec3894a3fff4e0584278afd8682b3b7504807777f21e261527f4d94c3cac27e5