Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 14:42

General

  • Target

    d69f07f10c254bdb57cc5f42fc73b909_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    d69f07f10c254bdb57cc5f42fc73b909

  • SHA1

    7398a130ec0be19d3b8d15f4e566c55279cddba7

  • SHA256

    a46db11e2e0492002d9d9977d1090c186717c78e84345ae43e3a75a6e683c56e

  • SHA512

    c32c3cdfbdb0ecc4abc81a12df75394176167aa0b5ccceeac7b34f652d47d538fd3d5dad0e9a9865a0864656be5249c248ae2c2087c52d3def5821bc9802befe

  • SSDEEP

    1536:2nCzo66sToABlrTOnCiadBR8i+eW6pOu2RtJ7lWbUcCzorc9b1m1I:qCzoOTCC1bRxwu2Rf7/cCUrc9bX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d69f07f10c254bdb57cc5f42fc73b909_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    78c33597cdb0de0864b618fe69b5df5d

    SHA1

    46e478bd307a8fc19523df8a32ec946b0be917b4

    SHA256

    fe8c9a6107f216d2613ab8013a4f9186bff84b9be42048c09eb6082458f5800c

    SHA512

    a7a0f8afd4341c96b892e3ae21bd979ce8f011f5e6dc1b78af2156c1286b83992f5674a9547971de083d76eab94345d4aa43362139e1be017aaf5b08be53f9c5