Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 13:55

General

  • Target

    d5986889bda4ca9a1bf25cacd2368261_JaffaCakes118.pdf

  • Size

    75KB

  • MD5

    d5986889bda4ca9a1bf25cacd2368261

  • SHA1

    fdea11e836c520b21720779457d84d0a47061990

  • SHA256

    04a628969ef1ea6fe331eb5356586e5256446f03223045f7ed0b8f603bd61ffe

  • SHA512

    d5ede1f9d0c133a7035a8930f32a1e2ddf15b342a380910d62dfcff78d2f10a219a6bd527fb73b7f8203e781fdb3bd656b0fbdbd89610cf7c4b9f062e1dc22a1

  • SSDEEP

    1536:M55Hjb8eaFyaOfB7onajCo0vkydyoDdVBGQv6WWZ5xWspO22cQ7:gFb8eCO6GR0/DdVzvI5g20

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d5986889bda4ca9a1bf25cacd2368261_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2220

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    09cca78ed66d192165279deda979c75b

    SHA1

    6e3af5914fecf1d769d3158f90001ec0e6f8002e

    SHA256

    8089897e09bb7476afe0c80574cfcbe9759458b5a3f9263d8fc56c25de2f3fe8

    SHA512

    247507e8ed42410bbc780d12f3c853f4307979b116cb80631fafcc1b8cca94ac883929712db2fab92b243829ef1d44071999cb2498350bbb41ab46f74a1fe735