Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 10:02

General

  • Target

    e20bcc74a4c5ccb2c436bf19fd1407a2_JaffaCakes118.pdf

  • Size

    76KB

  • MD5

    e20bcc74a4c5ccb2c436bf19fd1407a2

  • SHA1

    eece5d8fe16eb75a1fe7aadf3fef383ede171c77

  • SHA256

    47c63dfae76aeeb8c7d5cd4fc7c63d6f1304b2dfdda8d4214af2053e8170c532

  • SHA512

    9d3b33952c32ea6a3c8bd4e3b1de1250875f5a21ec6989e2bf4a924a868c87d5cffb159cc18270ab4dab81fd640101f4b57c2bd095d2f2b94568b1e829ae08e9

  • SSDEEP

    1536:zt4YN3e1SxJhroy7fhjolA3ZNtOHNydi8DWapOtQHW5R4vfEym6kYixDP:yYE8xDoy7fhjtJCt+3stQ+ReEyAYip

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e20bcc74a4c5ccb2c436bf19fd1407a2_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1540

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6d7dcf7a38d1b4c5ced0ec3787fa03f3

    SHA1

    6bd43ea3ea98461c3e855384391a38304fd7609d

    SHA256

    65ccc3aa89982d86ffe3322271ec1b36fb6ce27528371256e2ebab8b47e01df4

    SHA512

    3a4a061a0cd0f12e3cabc0c566d2caf1133bf5525d75d305472a072da56c4b1951466ee676e6499480cc1fb2bd2219365a18229af178c40a2ff362650fec18c1