Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 08:31

General

  • Target

    e9936672799dc431ed4c6b58b63f06ea_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    e9936672799dc431ed4c6b58b63f06ea

  • SHA1

    76a8b0d3e0d4473dfcb850ec37840bb11d108107

  • SHA256

    170b7b1955438874adc66fb7cc65b288cc995df865946b9fbd665adc5b567736

  • SHA512

    006e87cd28e0aa22adf1613e221f916baa79a359cb43850d01b564cc5908db7906693267c653a93b66683b96af14a098f4f2bafc557d3469ce02417388a7cfb1

  • SSDEEP

    1536:wzaqDcb9pns0pFiCdR1w+h5Z/sHZwsDf4iwq/W6pOu26W4Yo1Y/ibVMHf:wy9pnbmk1Ph5Zdsqu2CY+WiZu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9936672799dc431ed4c6b58b63f06ea_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7e30b5b5940d3feaab7ebc7ce9d5c705

    SHA1

    54dab0cabef2cb7183f9336c5fb79b901754cd94

    SHA256

    dd15667831d4ab1b7541717e6d567dac7036a4e553fcddb62dfda08d344fb774

    SHA512

    e5c00b09dd5494c6c82cd8c85b679a78f7a6819615f9b4904665643863f02986d477ad7b5e8a35f676c17bcc94c957f54be210727f65134d218b99cdfdb2fe1c