Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 04:32

General

  • Target

    f2b39152506c53b8f9ce6f999a3e5086_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    f2b39152506c53b8f9ce6f999a3e5086

  • SHA1

    95e6d062f9d04e86b39d90b4c6a838a7dd8e2118

  • SHA256

    0ecd4a3a75afc7284f5778916bb1ea2bdf1daf1ac387282c32211b9fd955c0d0

  • SHA512

    66590cc4a8c85825b26e582f7d27fd9613e14d44cc23653fa052c8d888d0cda37666e43b418fdf9b87584ea4ab1378c5007ebba9aa5111db88f721126d5e6a55

  • SSDEEP

    1536:yb1spWJp/VfsUDZUEs4U6ZssBRFOgDcjzxO6BCBWoM98JQ2oZMgWapOtQHdUcV6+:ENpFjDiENU6rLhSzxO6S9JQtZMZtQ9U4

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2b39152506c53b8f9ce6f999a3e5086_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2136

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ff147287fc3df561763460d5428aaa40

    SHA1

    f301281f92e06d55f66cb1606eae22e365d39c1c

    SHA256

    6accb625b6357f7c5036250cea2cb4d90ae392a739f93a513688a3707e858ded

    SHA512

    ccad2bc98515907b3240aba0753816ab57624af45ebee5064df1059230b1f379a7f1fba095a09d5e71d3504bb4bd2ab99997fefe0830db35bc2e6d2fb5eaa746