Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 09:18

General

  • Target

    cfb77241330c2486b3acb573b60f5b51_JaffaCakes118.pdf

  • Size

    92KB

  • MD5

    cfb77241330c2486b3acb573b60f5b51

  • SHA1

    c3dd3b11e9dee86891aed997e59bf0cdda015a69

  • SHA256

    49bb8e3b45cd3299c7c715a0ec3c0e1b77041c30b7b366ec47c2cb598df6c0f3

  • SHA512

    64650ae5f0926a7a61f2a0071cdd7df54897e232cf7300e40141cd59bbb53f186b7ea282c1022a0e7842acff8cd1795919bc1167c5ddc524763996dfd74d0668

  • SSDEEP

    1536:6mVgUOfsZDCg2L8xJTqt3T4NWeITAobwxpUcei8fvKw7ugyegmHLWQpOCoWbLGwU:jVhBwgTDGhT4NW5wTUfZux42CrSwv7D8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\cfb77241330c2486b3acb573b60f5b51_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d436a9ab37c11709c65d86dfaa3eab66

    SHA1

    f04b1acccb04f14c7c22cee6ce791f77a3270fc7

    SHA256

    586fa4b12a95468955d7e5d73ede9b037c5f373ba501cc82d041663dbac7e82f

    SHA512

    a019b37c8e70c22325a2a6bad2b731cc9813fc517803c4e2a3a6c9ddf99c3b2ce3a66fb2b2385e1f02849124d1af8b10aa00ef4039fc7d9522aa54ce22d4682f