Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 06:09

General

  • Target

    f2dc0cdb75d8f85ed20be4fbaa94338f_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    f2dc0cdb75d8f85ed20be4fbaa94338f

  • SHA1

    11b47691547193488cda7f75b0d9ab3d44fc63ef

  • SHA256

    e762f4e16307c5010451da1a0f504340756ad50a8f6b6a2c5a5ed8f8185be55e

  • SHA512

    3b0fdf988cd0e153fa9bfb0190d9c7148f1acd807e98c530d816ca9c77a8be44986d0511c3356e48ccaa92bf0346df9a7878fe4799eec043198dd005a24031ee

  • SSDEEP

    1536:dhlY6NuMgMvpxv9PlSHJz9JikV/+Fc95vyAWOWf1VZZstiWrIhWv0WjpORZ5F:pBwWN9QpJrV/+WTSFnstiW8WvgRh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f2dc0cdb75d8f85ed20be4fbaa94338f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7529439bacfb2120a753eb79db0726d5

    SHA1

    a53e39ec70d77d3bc381338768204b440cfbe5ef

    SHA256

    7e2a91f84835341dbe12404407ee0f6976e6a2a401a93efabb75c5e031b12b27

    SHA512

    01c85b36e24db2ad48d047a160d013fc30bd291da816ec8b1bcadf17a9fd46bd6ab0d3b6227631ff2f651b3d8072ca3fea3e6c5cdbe23edc36a489c9b9bcb2c1