Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 03:09

General

  • Target

    c924d1a82b482e6a605f4d8ac52285cc_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    c924d1a82b482e6a605f4d8ac52285cc

  • SHA1

    a1df271b76b44fda4a7164d0d4d816f348a14961

  • SHA256

    b6c1676e1815b256dcc950b0bbe8e035d44e1072449fac79984fc013207f6ece

  • SHA512

    1145283734ce119a0cbb10540107bf3f796b7c28621c666c51ac1d8a6fc6d12343a5f7ea6f36c12a2c9532c25204319e2a30ea7f5038ea5dc0e87a03d84e4c06

  • SSDEEP

    1536:ugMb+8SzEyugy4ajULKWzQSGFZyZvn9ZfhUWeJPePqRYWapOtQNeFuoQ:nMb+8SqLoLK6IbE9XYeqRBtQNeFE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c924d1a82b482e6a605f4d8ac52285cc_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c590567c9b8d08f197335fcc6f6e4099

    SHA1

    37c69ae7d3ac32a18a229b7bcf253ee479430e3d

    SHA256

    89f87796ec15f0ae4dba65ea03f428dea846783f7c6087592724fab4c18a8537

    SHA512

    50ab09785caae64c96b324892fd47dba7cef8003f0b4ee58ab356e4eccc298e827964fe734ab18c0ca1440a03613464a0c657cbd16686d079cddb9c38c6a31c2