Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 18:28

General

  • Target

    db73b7bb42b844461c65aee70aa0dfa2_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    db73b7bb42b844461c65aee70aa0dfa2

  • SHA1

    a4d17eae73600e26071121c1bcca323308502711

  • SHA256

    40aa56672f5f3ff87a2bf6ef02c093efcdcf638d76577bb336f1acec670eda3b

  • SHA512

    8ad1cf4c0797154b5bf3eaa084d0c3100090a6613cc7d4530db022f08f8feacb9d4a69979ff3c005e25dba029c0b61413e199ffd80c244be79eab45dc9e0d4f0

  • SSDEEP

    1536:wRtWblc+ElE+MjwRbxYUrY6h4XXc4U4rxGn+iWxApOG3U9nTWdn5EHVNEga:M2ljEigbOoY6heXjU4V3G3mnowfc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\db73b7bb42b844461c65aee70aa0dfa2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    acd596cc2f6c144779295c4f4892bf66

    SHA1

    da31a7b78b9c34bec1835e82313e61ac40a6d12f

    SHA256

    bdc90c1edbf56f4a57c2af5c88840360462e69b8b9e4d4f567d3b50e3615c795

    SHA512

    6557d521a0bfe435bd08cd73f4b63d31cdb9cee6deaf09b9b7e0317f202eca464c9e4a649936021ee20469dbc9504789c0082e57fd25cb4e94f40eef63c137c4