Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 22:07

General

  • Target

    e887d8ff084903de1e9fb3dd93a7748d_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    e887d8ff084903de1e9fb3dd93a7748d

  • SHA1

    ade7d70f0f298d8c0317a01c8a333918394dbeef

  • SHA256

    cd997fd9fe26feebd7b018520a56b501e2445a30bb3212cd0465a955d7130a5c

  • SHA512

    33289af3b3eaf82587946540e7a1d59741c7b4978a24fff75f02ff4b3750a2f4373e423aeb6b9a45432dd64f0e894a0d239d47d0dd5a52a7078f01a7014da41c

  • SSDEEP

    1536:iy3jEdAJgijFRHshIG8tezI0fKxeOaHsBPjWLYBYXHZwW6pOu2loHAJFBG:bzEziMhpA4K0O6YGJZu2iHAJq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e887d8ff084903de1e9fb3dd93a7748d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1948

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c0aaebfd6d638e045f050f50d573676b

    SHA1

    1c0962bbe63a9af802406652057aa90df3fe706a

    SHA256

    c731fdc4212c3566e71d61ed449e9c9d1d1db6fdad15d17c30d8f2878d831b30

    SHA512

    c20c5e375dd05d203e3e2ba85a08a86211fb6f9538a16defd28107d713306df7ac1832b32b00ca2b417fe8018e2b28a274081ab5655d3a0f5f058a36e972040a