Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 11:56

General

  • Target

    f5b6530e328cf751eaa3d40a802a1cd9_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    f5b6530e328cf751eaa3d40a802a1cd9

  • SHA1

    6d64a1d690fff29d819650d83aff3ccc4891e3e3

  • SHA256

    a9cccf426e16aaa31b52a300f7bbc00f5c3316a99649135d0c1460638d9403af

  • SHA512

    fb2c21763d566cc491f9efc22ae7c4bd49cc80cd66b1bf1ced8d6a33f1740135201f1c433507086e80467b69b103f8c251577c37402790a2e39d9de97731e529

  • SSDEEP

    1536:Rix26iCM4vFw19QLByYEJCdYKSupCmWQpOCoW7Y4QXqc4JO1bCZ1Qng:sA5CzWbQoJJgYKSWCZCqqVc1b6B

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5b6530e328cf751eaa3d40a802a1cd9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2412

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1b47e275ad283ba4be92338f7eec263b

    SHA1

    0be834dcc904073eadf2a481acb2df4175de2651

    SHA256

    b3155e742d7a655cea24476e9b6e7cb8d1970ede6fc4dd38e3624f27d9ea9149

    SHA512

    055749bb1280ba7aac441b6c0cd8abb0b283334e404ffe96a086ca2c12810a3b73e93c44b32ef796f7eecc2a8073684252eab1e488ae6ba555826e78ffee96c9