Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 05:52

General

  • Target

    f2d37612f3f90a60031125d8ce0dadaf_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    f2d37612f3f90a60031125d8ce0dadaf

  • SHA1

    1043734981e851d8f95de6401428491189f2e5a6

  • SHA256

    3aabd0aa7df56a68255e8a3d402c1b66508c22448684ae0173aa9ffaa1dfe778

  • SHA512

    6fc038448931c52af88b7583fcaf79fab95357864b2d2a6b66fa8671d47ae7cc0a18d76bb9662f199e94262d6c4c46100cdc117d05b6562a4493a5274d08f713

  • SSDEEP

    1536:vqPBbeOI2IhxI4V9OwSuJSsh+f3bjTmlVHV05TEG/g6gUiL:CEOGhxIq7SuJjhq6lhVoEyRgF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2d37612f3f90a60031125d8ce0dadaf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b3dfbe650636aa9e0c007ded2976860f

    SHA1

    f3dd3d28c9203a6bbd8c357060c43a0ba2784df4

    SHA256

    1d721d430a5c93af42bd92f5aa5c1638730a8ad5c4fb9e22430b791aca6af499

    SHA512

    119811818353a18598aca443d368961f9787b016b6ca8f1378cf656de69877dd748ec19a962f9eb04824c53c5c6070cbdafa7a785c94a67fd778937e25e059da