Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 00:06

General

  • Target

    c56ee50e1883edfe125872681a7bd034_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    c56ee50e1883edfe125872681a7bd034

  • SHA1

    d97035dd0b472dbdf55e45f182d99568ab7b784d

  • SHA256

    1ec8c505ea286ead34fa5f22cdb8121b06ac6341bd5d3f1387562a42350a2bda

  • SHA512

    f1b32dae8b0f1bb2cbbade6c907f52d5444ddfc0734f15a201f4cb08c043a4575ddd602dc5494b3c5f5d34a37edd63087b64eb77ddfd7768996d3fc3b3bf8148

  • SSDEEP

    1536:3ayzQ0OxetUTMjfj3ftczEWswxTSk45X8WUXL79ZS+2d+aHX/WspORjCECCE3T:/zdOxeaGfjPtczEWH0kfXLh4+/aHXOR2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c56ee50e1883edfe125872681a7bd034_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2100

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9ea41ae30593de9eb81e2aa95e9aab1b

    SHA1

    23047368db6264d5d5309cdc21d04ece4221f15e

    SHA256

    a84e530f268a97896b96d155aec471c9658b105434498b0d1a79e89356b7b4b9

    SHA512

    c3fcabfad5cb7003774616b903089031889a54f427e39e97c5a3fd1d676e06ffa7b53da1bfe3bc1721fb69142307be397643653a53f60584da3e2086cdf0245f