Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 10:51 UTC

General

  • Target

    e9d2bf0fa9812628746bd6123f052d72_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    e9d2bf0fa9812628746bd6123f052d72

  • SHA1

    54dbe7396dbaa55e5a932c02f867cc0b71b4dd83

  • SHA256

    00baa608f561708cd64deea79fb8f6d3d6cdfe4aff38f1ebfaec989fa8f48281

  • SHA512

    119bc68263040ae22810b509565544afc2e98c593d134ab2f35092d4319bb7ce5086c44dd04b21b24bb738c0d8eae32eeb05d2b58935f42950542b97e80afbf2

  • SSDEEP

    768:C5nHpY7S28Uqj5rzqRWIVpfZjN3LmN63FoP4lrvpO:GHNPUqj5KYIVpfZjhL263FSOvpO

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9d2bf0fa9812628746bd6123f052d72_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    02e3b82ab4e799ad1a1bd8727b67fcd1

    SHA1

    8b099fbdad1d5dfe3b36dc6985ccec4270f77d0d

    SHA256

    e33d5ac5c3a60cb37c8b3d7a5994db49408023fc7a5b1fa148098eb685f839e7

    SHA512

    c18736d61d6b0aed05fca9b18c7adc139922d293460dca1bf2a8d114bf7a5db1822a05f30e3b4f9cdecc9998d37bc0d7cc01dfec599ac4e47cabeb315d0cfe96

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.