Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 16:55

General

  • Target

    d969650be257cfe589e0e3cec481d8bb_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    d969650be257cfe589e0e3cec481d8bb

  • SHA1

    1a3162afdf3d2644e15606cecd6dd9a2d904bb4c

  • SHA256

    d5fc2b488e9583844e447d94ce3f79462050b35383f8c7e36d02340394cc4b0a

  • SHA512

    20fb1b2c1654f8b98e290d6a6cebf881ed283ffc35f94771a1e080fe31cb0c4bb2289c9891de8f2bd1c9fcdae7b1adefca49f69ad9bd5a210b2b64ce5e5d2645

  • SSDEEP

    1536:q/Lx3DWUoovOjPPRMwabl8Hd+CV7tUOKlJilLwUVUUmYI3WOpOwrKWVrNRcY7MOp:4t6bYODPeLYd+CV7tUV/irVCX0wrXRRj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d969650be257cfe589e0e3cec481d8bb_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c04fcb2f7f490076ba4489b60c211b5f

    SHA1

    e8281959fadac076da4d3bb1618fbbdadab3c16c

    SHA256

    56427f2d27d73ea568fb31a1dfa58a1461fc84baa205fafa0d85f54238bb8e95

    SHA512

    c38655712763d5037d5625e5b2414ec4bf36a6cb1082fa5edeeb9b0cc82d165b03d3cfb2c771882c0f4a3d5fa2a5f1a61344033d0faf26e5d62843466539cc28