Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 12:23

General

  • Target

    e2891956599785f0dc889896d8aa90da_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    e2891956599785f0dc889896d8aa90da

  • SHA1

    47483935e12f512b60b74272b61f75857b6b3612

  • SHA256

    a939bea7284b45894b539498a8f62fda353db1272652f668b447c88e84bea337

  • SHA512

    e6395a223890fd6e73db312f172d6e34b75bbd03e9b720ae70dc5b2e74634813ae32b0a90ef355271886cc220980527827c68cab601d0e68a70488970aa0cf30

  • SSDEEP

    1536:CbC/LuljfrSHOKzHoTOblfg5GqVtzBf/FOLFiWOpOwrKWro15wcTojWG:r/wfrSHOKz2OblkLVtlFO5XwrO1G6+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e2891956599785f0dc889896d8aa90da_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1628

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6df8389771e5b5f109f0c247729b0b1d

    SHA1

    eb1a3127b882e61be439543a9636924771171977

    SHA256

    0a6115252b92a748ab238ce5682e2efbb01319415e4d79b93b74afc7ef1431f8

    SHA512

    73eee0ace16dcbb40dcb4a31135c6856bbf3df96d82e509c4daa4f96af85d870495d3a5ec6d18f128e9314d37a21da721094f751cae5ae4ad86ae7fc872cb809