Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 12:32

General

  • Target

    e9ffb767a75b766d1fc56f0df5cfc7ff_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    e9ffb767a75b766d1fc56f0df5cfc7ff

  • SHA1

    2319744463793f57c8c75b4ce18f03d9c3691f97

  • SHA256

    faeb38957f2d070a05b8b5e45b3532921084c7c742d528e7583a5633a8861f9f

  • SHA512

    6e9f8e17b447aa891345ebcbdf3964261e84ba6bc226da17567675a285d61b55f7f816e74c157d2fd4e972c64bfc464aec34563f88d3f7c78ada0671258401bc

  • SSDEEP

    1536:OkSdtZZ++s6kxFoYemTo7tpa0TTwRIHTPWxApOGzWzgsKB+FNO3oqEp0:jUZZ+EkxWFV3hAh3G2o+FE3oi

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e9ffb767a75b766d1fc56f0df5cfc7ff_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fafc72f9c05010a84e82e30c0803dae7

    SHA1

    842549ed7747bd2c82fe2b7d5a48c566646f151e

    SHA256

    60815732df8c7d6d930721954f12e41c7110d6c3aa7f758ab5aa0ce490ab74ef

    SHA512

    118f27c7f3649f91846c15066270aa4143462350656c11b0fa204365e881bee8f94c4456330b1b07fffaab1669a09e327aad1355e7cc775af6ca5d109f36ca0b