Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 14:38

General

  • Target

    f8354e85f7b38de3313902ff22525c73_JaffaCakes118.pdf

  • Size

    87KB

  • MD5

    f8354e85f7b38de3313902ff22525c73

  • SHA1

    5860ca196951d933c55bf3b11ddfaffb63672b39

  • SHA256

    1e134953258bc969d6df244b2be9a0f6a695f150b35f4c6a88e2387d6b025138

  • SHA512

    355904e5148aa5f239331953c82a1d59a2027e11b396a70794457ca29022c8969a24ba1dff74afd4c7e9efe38be203d38557955359fcbb04a5043e8ccedb1d2c

  • SSDEEP

    1536:E36Y5AELGyLjI0szqm67ztRElA85KBm4nHNmJBRzmgIlvuPUcVDl7WXKOiPxXcWm:QpqGX0sBVtmJBRzmgIEPUcVZ1OWXJZa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f8354e85f7b38de3313902ff22525c73_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2196

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1a070f0e0d3242a1ba0fef30d13464e0

    SHA1

    a86a6f0bf1cc69cc4703f75cd4750607fc6ae89f

    SHA256

    bca2dfac756625fa629b30b57a52d29128564768ace5e35562a2020bbd360ad6

    SHA512

    76e168c47c8478b80a912d5a892b2963ffcce6f6fd51188d34dfebf2ef6f181e09c39d415d4a8e5bf0d615ed7a6df15d1ad4715ba8bed546f3fb879b363bf426