Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 15:54

General

  • Target

    e7d5ec98f5775d927a0fd14eaae8fd64_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    e7d5ec98f5775d927a0fd14eaae8fd64

  • SHA1

    83b23dc6634e83f3477571eb803786283af820e3

  • SHA256

    927aff293ebde505faba80df82e79c52ab815b1759ac13400e1e1f986a66aacd

  • SHA512

    f278fe0f9bc92e46df3d5df5ba28d836d744b321438ac098a20d87e9eabfbc3ea6caa4663bf1bf7de336a435471034308080cecacedc51c4c321434b7ade2418

  • SSDEEP

    1536:qObZ4cHy7MM18kW3Dmtvj5iS1sF5P9TEDKJ1TrZ9wWkNpOPQB2ICwMxZiwWYswn1:H9yQQ8kW34TsF5PhE+JtrVPKzWZim+L8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e7d5ec98f5775d927a0fd14eaae8fd64_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3c4daf4c65a50f076401483484ee807d

    SHA1

    3de4a022c8cf3695bd090c149383d488cd10ceb7

    SHA256

    b109acfafbdb8026e21492537c17ba85f75863fc67a1dd9423d9ff9ff20c2b70

    SHA512

    2ad665ce3417f0234044c04ebfd9ae35f0114f15aa3bf1871eb36660cb34f6804d9b66ecc7926a8c7664372d125441b7a55a3b3310c3132e088c36eec11d99f9