Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 12:01

General

  • Target

    d32be362d8e449c02e92952f1c5fabdb_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    d32be362d8e449c02e92952f1c5fabdb

  • SHA1

    a525b7eeb90ea36a19cb86fe46a4015b9b2e76b5

  • SHA256

    809773c58e34eb1e04cb735e9e254f7ca26b4d06d63bc91f70adc3df51f1b2cf

  • SHA512

    0ff5db26dc2593469ea52be8fed3ee13b72f0f5e410694446eb4aa668a124802614e77147c5e578457e8eaa1d492b4a9533fdeea3e575b2669431f9207cdae9c

  • SSDEEP

    1536:IvyJU/ylFZ3buPLUaSjTozJV53peiM28jNBg9uWapOtQHWhBw5UdmAosGKa:j6ylbLmAf4xpeiepG9tQF5smAnc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d32be362d8e449c02e92952f1c5fabdb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b795f9a2f41e3af086886c9f44848a60

    SHA1

    b5e10de40677a780e07032a079ce94f6857a0619

    SHA256

    9f0e0dc79d033ae8b221fb7fae305c10a6daf63a24f2e651e62e75576e50d52b

    SHA512

    0d1f689ad98053d40282096575f36df6982059fe516b855f497615738c856b71fdab261e1f56b5e137791125f07fd6bba023fdf6a46cd15c6c1e0c8066c8d662