Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 02:04

General

  • Target

    e8f629ae1bab5d65c3ca3d80f3693e88_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    e8f629ae1bab5d65c3ca3d80f3693e88

  • SHA1

    fe82564d39ba5359c724269597957129c7448a8b

  • SHA256

    f4131b9f6a1bf6ebc78087085b9bd1786a2fa648ceedf09ff6e8f2e0572d148d

  • SHA512

    40759c8fcb6ac0d8b8602d535f4283fd59d4e866424e1f3cc862258261923583efcc200117185674e00f42ede170e6f7f8241abb1d422c505c384336e2c4d644

  • SSDEEP

    1536:vfVa16rWaXY2d4A7hsx2dBIrahoGB4IllddXPWjWtkzeScWW6pOu2pUywPCtz:nVaJahd4AdsoLKpQ4IlBXPjTu2pUywP+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8f629ae1bab5d65c3ca3d80f3693e88_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ceb9f5cada206d11bf72962c7ec20232

    SHA1

    795b72a8afb745232798d66f19e6b5f4c7e17cf4

    SHA256

    78863a0759890b4c3a4f5a6ecc09287c6bbb8e8d0381e5b41b3725a5672363a1

    SHA512

    c55fbacd65f5e843d15cdce9c0f3c0d818f5469aaf5e4dae7c2ed066d543cfc02c7898dbd5e89419e231352aa350bc6896fffb53ff8333d057990b9e6914bc5b