Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/04/2024, 04:10

General

  • Target

    f046c28f706bdc5588a1c60a6e893c00_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    f046c28f706bdc5588a1c60a6e893c00

  • SHA1

    b79832f623e8a1a6bc127337a40f0b5c8297a430

  • SHA256

    10c652b67b0d62a9a2552e400e75f5c30014a7cbc9704b962630b44da35e61e9

  • SHA512

    efc3cd8b6a8d5bee036e41763eeb94983e1e94f5f2b9ab8dc08cccd40ed1e5e51e7d7c5b543a6fd883aa0bc4db1eae4f5f0d2808c90e87def947aa9a3322579e

  • SSDEEP

    1536:vV2c2YLNT1CCFhbq8c/dGKjs80a1UXX9GbTsqWSshjGjJvRgY5RdQ/83d1HufiWW:ADYhTPhbqJFls8B+X9dSiIZJdG83zmi7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f046c28f706bdc5588a1c60a6e893c00_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    db0becdec0ef6bfba7626ec59422222e

    SHA1

    a809078c872767ebcb7c9e725ee557cb0068402e

    SHA256

    a3dbfb05575411f1b416a3abb5f856e568eec12d4e9922ec3e6d40023d7f869d

    SHA512

    fec2fea4006a2609c251b854f7e26ac1441f8d8f183647b081d4fc456e71734e6b838ce58f1aec7532ddabc19348c0d5ebf7736a4429f592ffc2668b235ca195