Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 22:13

General

  • Target

    e88ac2b8086102c01e7f1f7f2530b072_JaffaCakes118.pdf

  • Size

    94KB

  • MD5

    e88ac2b8086102c01e7f1f7f2530b072

  • SHA1

    d8fa3dcd8ce0dce3dae0dbd7717061f613948f47

  • SHA256

    24a15d1805dab0dbd1e55b1da6516449263dd4239c902757be430493eb5d0c10

  • SHA512

    dc24779809b5a0203159731b21ab08984c158bd27111df2f4a18ecadbc6a811b04ffbb316dd31e221f2f2287bfa0651523b1c72a3120306bb0bcedecfe7418f4

  • SSDEEP

    1536:1+XgTO9PwdpkXH0ycKjpuyac6oM1RRyMl+4HHBvhHa6dGL8CcZWtaCfP42WxApO1:4gYPspuH0ytuya5omzVl+4nfJEL8tY/I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e88ac2b8086102c01e7f1f7f2530b072_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5aabe5220beb45a3354db89ba252e062

    SHA1

    3ae8521e124798da6f2d3271abbe3de7b8d37fef

    SHA256

    f87d12896778e587caba6c7a9eb58a6acb33185b28018ddb3d8805cdec25ed4d

    SHA512

    0aee5b4f4f70990a9dfb5dc2216c189bf009b228080f0674be5d0acb28d9321e41ef75740f84f70149d2f8dfbb149d5d40f23a532b8ec3fbf2c61a7bf72a38ce