Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 08:01

General

  • Target

    df880c52015f48f445d86f15482db117_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    df880c52015f48f445d86f15482db117

  • SHA1

    0b4e6c52665421ced164f3cffaf6f7031a5c6da4

  • SHA256

    2e131d8fc0a52f87d068d6c0f17e29f268ec4778205fc7eae2ddba425eee41c8

  • SHA512

    535d905ee65dfc264362b5575b924feb513b3393f6f44c008c369c2c6ac48faf0887a38d03f64c8172755bffa54c09c560587699ac7dd65d5cac87cdd598c080

  • SSDEEP

    1536:sUkD/clTJOzXwsUjeceYjDlC3ZxT8Zq9zUj+iU7Wh2FO6XaW6pOu2Bg0C6wp:rkD/ccBFfuoxT8ZqdQ+O2FO6Xnu2O0Cp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df880c52015f48f445d86f15482db117_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    80c941cda2c7d79b97b90f95a264bf77

    SHA1

    cc73a38b91f26b32fe68e746ae8aaff8d5b4ab82

    SHA256

    55e820fe320e197bc5240b62c4077db7daf3e08ed18f714d486f3aa67b5509f8

    SHA512

    93c3646febdf5954ff7a6a0851acaa63a54213d2bed76293fbe97809f2b1e9c09ad46b534fb7142134d4eef3ab5748bf84d2791dff7aa48373bd74b862ba3766