Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 23:43

General

  • Target

    f496801af1d09f8bbd688321a9563d26_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    f496801af1d09f8bbd688321a9563d26

  • SHA1

    093d821454f79438805bce4df266ea6f1dbf57be

  • SHA256

    d9f7cb2297502cec326feba94ad496b0cdb049749d980df72a417c4caf036894

  • SHA512

    bdcb8e2d9661271ba7964aa597ee4b5ed18aae9b1c7893699f622c8aa7df3f1709d267f277a701544c00ac0efe22ecab66f1e6201f82ad2ba7b7b0d64836504f

  • SSDEEP

    768:xcXBCaoavxccfiCl3+HbYft+l7Ms3eoFAOmoT0d7R1z0Ek:xcLjZczCq+tloFJsR1xk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f496801af1d09f8bbd688321a9563d26_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5a36b9a376f5c4c96e9bee2bbc54322d

    SHA1

    a07136a640ddcde90c70181bbf95868bed3cdf90

    SHA256

    d046d5b74de96715e0fc9fd6e9f1161218d830caf87d239fb6715a8d2eaeea0c

    SHA512

    b4f2fa5170fea616b6de7705f0a1e50cc5ba2128158af5cf08979b2bcac9d12b0fc31d7c16cc4a527018cd6faafaa092e1990e5669a70a053057a017470fa406