Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 22:14

General

  • Target

    e88b1001ff9551c1fd736ff571fbb939_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    e88b1001ff9551c1fd736ff571fbb939

  • SHA1

    ecd99e916b1a520bda2a3f6ee6189545d9645fa6

  • SHA256

    0d1ac499992fe71c0c933992a73f56ef4398094a38586638396af26a73db60ea

  • SHA512

    7cf2d16c70f9168b77ac815323f7bff3274a8a9cece4db58260d359eecdf386a720daaefffe87ee61e88342ea9bc7530416295f9a94d0ee1d25baebbfbd0bb7b

  • SSDEEP

    1536:M9IRhaS+N+f5PsE8SCvAxirPKPlMJYE2lA+WkNpOPaW0jBi7sceF/XBMk:phl+N+eE8oxiz6lew4PfscW/Xp

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e88b1001ff9551c1fd736ff571fbb939_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    03dc2b668d1dbfb72d92e3893a557534

    SHA1

    2b8f9cc46f1ec2faecd4c662c3e3d557f04ab164

    SHA256

    2698fa1b021413f3097c67cfc1b4d545f91763014d0da1a01ef7ce1fbc436b81

    SHA512

    318bd6d8d2a49e0efecb9f1e0aae8e392140931ca184df96f1307eb1fb8e3b1a91620c04f9aec4d4787c1c2d51ce3f21a569fe1de0f1facde96e1a6294622f52