Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 03:10

General

  • Target

    f029f0ca7d1c97bda8c213fd2c127815_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    f029f0ca7d1c97bda8c213fd2c127815

  • SHA1

    9e4c883d0c732d9998194c4dc4f05f410a9eacdb

  • SHA256

    106c4a6caab6abd8f617e9b411bb428ea4af11118881149a1f0e159f2cfa6f2b

  • SHA512

    9745e5da2fc9ce46d1a4afe31e2f335fb7309f0a696ce51c6c3a9fa5ed5173c664e3044ef003c8bbee5fe5eb6743db8cd29ff53f436b565ff07bf5ed55c7357a

  • SSDEEP

    1536:L3YEjaoim4qRt4Da9vlKEUJJq/LF1roxE5tj8EfPWHpOvTWqh7+Z3EgvHjg4VE:LYEGox46ZlvUJg/LL0xijdlv3h7+Z39e

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f029f0ca7d1c97bda8c213fd2c127815_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    129f918e1dac9338699103728e44a566

    SHA1

    c35122b783ab661a32a87ae05807b8834976cd48

    SHA256

    194dc40e2fdcd45e576cd3786b334aafdc9638d4dc1cc13763618d82adb7a078

    SHA512

    703e72111e18615ce61663c393fb191b8bd9c62dec50ff3105afbf1bdad4f89e61c8bf8726e4135abdfd5c23f2e8b59680891f94c77af1791707317a3e587ed0