Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 12:37

General

  • Target

    d3e4fe7632d84f9db2942f80aede3616_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    d3e4fe7632d84f9db2942f80aede3616

  • SHA1

    6007bdfc302d17d9a10442bc7c777e666b364338

  • SHA256

    28f9f92d923fb2b84adeee08b48b91bb6b7b49a38611c697c58c40cdf56a71b3

  • SHA512

    8b7c00f6a816b4d19d69df7515e1a67d679c5d98e34505f3a18352e1b6f44806e8629dbd146cfab545131c1062bacd946656407d66c7112ad60544b8952bb978

  • SSDEEP

    1536:62U4sVWgsHayom4aYyMUkUzn2mk2I4CyG1DAUbet7MWapOtQHW9eLer2/3y/ImKr:BhsVq6zafPkCotTBbbentQgd6/RZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d3e4fe7632d84f9db2942f80aede3616_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    37b855ccf236d42dfdc61a3129457ea6

    SHA1

    f93f81cf32e835337c5c39285e3656d0e6c34b3f

    SHA256

    52a0f86f3ca1fb6442b185dadd4dc3f52ab400bee2120e476341fda9a4bb14b3

    SHA512

    a5c5d4f9bdc77633036131e749a1aecc651a4557bddc574e428329dd5931c59f887e81cec0488845a29652829d23d9655e05337e1bacd3957ae6bb27f6310ba0