Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 07:29

General

  • Target

    ece4069fc350dcb71b500b3760200fc1_JaffaCakes118.pdf

  • Size

    61KB

  • MD5

    ece4069fc350dcb71b500b3760200fc1

  • SHA1

    33a7470a7df4a9e6f81ce3078b3d1f74c46713ea

  • SHA256

    57b2ec5aa10ba0b0fdba7b51929f1c159f9cc4f91a84b8a1ca425b665a6c9e0b

  • SHA512

    a39d6320490ae96e39684a64221bb2bb064a40b978b9e9c6b96a9b5f1afb3ace4dc4b7193dd9913a996d71fd7ba20834227d332a7f5ce76979822b9cc70aac5c

  • SSDEEP

    1536:jGFV7ucJemYE5mIA0r2BR78dKWx3xJ2996xdx3LpZGyi:yFV7JYE5Zr2BR78hMPChlZC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ece4069fc350dcb71b500b3760200fc1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    193a6dd5869992da2f5cf50da8e90152

    SHA1

    20e93fdd6b924dc17c3432f5ca659036a6893b43

    SHA256

    46a874516ec08a6c7599160721e1769eae020a7161863b243bc5e01a83f79766

    SHA512

    47648d49b414b64ab98aa5c7cae16463ef71a8a7187d7cd2b1d7ce384783da8f85eac5f5c8823377e78db2db88836c019d4424cee7c93d8c61c4f4ea537d53d3