Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 02:25

General

  • Target

    e8ffd93ac5fc1fd41d603ecead00e25c_JaffaCakes118.pdf

  • Size

    72KB

  • MD5

    e8ffd93ac5fc1fd41d603ecead00e25c

  • SHA1

    be5e0f624d5f2045d4a440e09c7649f24c5b1cbf

  • SHA256

    887a0d891a5abf7aa3f4f648dd2e14a4ddef2c39f289b2f8676f346ea1dc2e57

  • SHA512

    37ab4a98242c140a46ae6d820fb1030326c34a7b74905f5f1867cc9e8ebc83e4100237b1405799b14d0b0c62b0fe142380d222b03d4aa81ffa8ee8742ee2e8ef

  • SSDEEP

    1536:zWBh1FDi1gd7zirtrk+UbGeq/Gq9RLpAjzXceWI0cAejSr43WspOR+rb:gDiuPirTUb2/GWLCXcNNeg4mRU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8ffd93ac5fc1fd41d603ecead00e25c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1908

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b495dc519963df426b4b62375268f84f

    SHA1

    16e3aa4f43430bc374116725784ec898946003a2

    SHA256

    3c8d8f1c2c0ac96afcc2acba59378a9fd6547f3f04035ce305a89a29e1579264

    SHA512

    7dcb6606d250fb718dd19eae1d265b66c037aeedbfffa97a34b334f35b391e3a733872e19a78150e6c8fc0aa275da9b039af0ea56abf3c96feefbc723eeffe28