Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 12:25

General

  • Target

    f5c3ba6ce48ebb0bc074c6ad95e78472_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    f5c3ba6ce48ebb0bc074c6ad95e78472

  • SHA1

    10244d04f2992c8ea71fe1d4ad1b8ed571823983

  • SHA256

    102e5cf00d77cf72cd8dc4a5392646abb05b160d4b0cf79ce6ebeb103f738226

  • SHA512

    0dff29c1a04d3c14ccbea6bb713c14326982247ef80acad6822b9616b9b1d2a41b9f8428f0c4bfab231da09fd87dbe26793440d360f733b7a2cf9b6b919c1d17

  • SSDEEP

    1536:6bqtr/lz8OU+Qk6YCrAskBBMAhChyR5dxouL4vMRXKWreob0s/1LHZWbpONiWLg+:SGJYOU+Qk6YAkBBeyR5HorvMRXre0HbJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f5c3ba6ce48ebb0bc074c6ad95e78472_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0e3d7497d7b1c565f56439bc9973e516

    SHA1

    fba56ae368cdd9bfaff171c490f5f151b8bcc98f

    SHA256

    a4a081b3ea2bbc1365a263a1fcea6763b1dc307a22288cb414d14f6dcb25d79b

    SHA512

    3696293c62fec8b7032b9b464d7a71592791be11132c2556f940692f94b77a18669fea600d945d9c0521af69f26ea767b3b37cd1719aed7da53403e7a7dba3b1