Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/04/2024, 17:25

General

  • Target

    be510455da40086062f24773907dbcfb_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    be510455da40086062f24773907dbcfb

  • SHA1

    f63a0cefa45e3a64ab3e774b381360e545efa1c4

  • SHA256

    195f7ab17c36f353526c37fb529fab0d7b2f7c07b1f15665ec26d8bb05fdfa30

  • SHA512

    cfa657099f249a84be562a6af049be8fdc489fdc3ac369a1f8df0e5b226345920befbadce6d4e90f6c003636f7050bbf86c620c566fc7365ee72027d14a07423

  • SSDEEP

    1536:B8AnqQVAS4UO3sHcsDP+k13hLV0+X2SQgLuW6pOu26WJ+bRhMHsxCLN7S:mA7ccHcsDx13Je+Bpru26FhMHTL4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\be510455da40086062f24773907dbcfb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    43d2b2e1a5c2de5398443775bccf044d

    SHA1

    b4411eef4873351898e3316f729f1a9e2a18e63b

    SHA256

    33181b38350f45ce89f97a85f1ee2a3636fc6b79da0f5a8798651ee4533ecdd5

    SHA512

    56f3d04e8d89533262f27a17df5c8c0fd3d0a955f5d4d6a533565cc5dc3b37880eedde3bd6ee6751c0188bcd3d3bc16a50c8cecf4757e5f4996e43affd5061ca