Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 14:22

General

  • Target

    ea2f48a21fc1fa1611fecde35babe54f_JaffaCakes118.pdf

  • Size

    99KB

  • MD5

    ea2f48a21fc1fa1611fecde35babe54f

  • SHA1

    36a4a72405f98020ecefb3b40c27d143cac2d75c

  • SHA256

    7a7770a38f1788dc448e2dd6923deb365971384ae7e9c59b137d2f0306b6e393

  • SHA512

    532a543447771da7d862a5cfb19716dc4ecad7f1e5f2da13f110ba3264b263a215a8892e48c012cee7d4d67c844e9dfb8b5b7f1ce969011490738d0cf7289ab7

  • SSDEEP

    1536:oXhtKJUnziLOqxgToKApEBLegh1VylTOqURyFBFL+ZWQFv+JJrqAiWOpOwrXLGu6:3JUnoxGLqgJyFSAFScJJrqAXwrXLG+Y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ea2f48a21fc1fa1611fecde35babe54f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    660ab68a98d2f6ce253d9117d29f3430

    SHA1

    24d3e70af501f38483d28f5dbff7f11f29a3ff71

    SHA256

    d2b8b4cea688276ba5e8aa8b99064a913c43ba6dda8037d214e0081a6370d11d

    SHA512

    6501e644b5169b45f4455701a04c4a5b5948a686447402cfbf81ee34b90d476f06e96afe3a8d19e0a38277be5658233456af68bdd1481db1888812723e39a187