Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 15:58

General

  • Target

    f624dadcb5160633180151cdae69ad78_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    f624dadcb5160633180151cdae69ad78

  • SHA1

    f7c96246d1f71b3248e027f326640ba0e37023d6

  • SHA256

    578fd867dbbb6e85bf7fc0163b677444b1b059cfa956061d29ab5f1ad21e72ba

  • SHA512

    30771e057626ea32fa32ce3cda512d3866035cbbed75a1a6b8dc6a051de72d82e1934b358dc91a729180c7701da4276c5ba21c8120018c643225844f70f05ff4

  • SSDEEP

    1536:IMy+37yn21BfSr+w/YVqoClt2jEO72m3MW4vj6ddCuVuELxJWxIFlq+arlNisvrB:EG711B6lsClwjURPvj6dtOInufXvrNnb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f624dadcb5160633180151cdae69ad78_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1800

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9420f16d6cfbdf345d5e3923ba1048f7

    SHA1

    7dffefcb60a5e5112d9d49c496eb3e9510d84079

    SHA256

    f9a0eafb8911753846a9fcaff83040df62d56f33e4aeb6b100c0e2a04750aea7

    SHA512

    9a81329e30f3ceae8973bc9bbe7708d10968b6795fd0773e13b24a6ab3ded42f23de044f40db0f0732b4b1c3238a726f5cebfd1d510e390d6193a7265bd580f2