Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/04/2024, 21:17

General

  • Target

    e86f58abcb599b5e419fa251c6989a12_JaffaCakes118.pdf

  • Size

    92KB

  • MD5

    e86f58abcb599b5e419fa251c6989a12

  • SHA1

    f8fc485348648554366878139e341a11368e71c4

  • SHA256

    61b23428d0ebae2c640d317c74fd612b1098f73061125b8e1cc854904f4a9cd7

  • SHA512

    4d99144be52b6353fe4bdc67585cb58a71370100a93045f431bf54f084e4df99c48fffd1f8fc333b80195ddd4fca9b5242a1dd0de12a3d09a83264e6b114865d

  • SSDEEP

    1536:xXA01+tWF4MNA/iXuJwVJWbkVw8DfR5cworM3NGWM9+AOsIQcAVsWcpOm8am9ezZ:tNbFAq49kS8D5StrMi+7sIQcAV3m8X9I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e86f58abcb599b5e419fa251c6989a12_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3e88c28308a635f80afdbcf357bb46b0

    SHA1

    e147218880d2ec0d48faebcc384d8729451b447f

    SHA256

    0fe2aae017c25af9b234ec9aa14a8c9c39a7cb740400f2bcc03667c0cba10f2f

    SHA512

    58614dc4ebba8177d4695d6b87c136f170283a854174965073060175fa0ef5d2375f21f87a0c9e45b309ced5bfaf0f35e21ffc00d20e828c5bd5ed4ae9eaa90b