Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 16:13

General

  • Target

    f853c6aa627c97541d49cff026e6b79b_JaffaCakes118.pdf

  • Size

    57KB

  • MD5

    f853c6aa627c97541d49cff026e6b79b

  • SHA1

    f7086ead89f549ed33413d98ee548538aa016af3

  • SHA256

    0b644fbebb35fc1130e8ca73ea01c28e3f149fd1e4a23635e9e30a3d456cc2b8

  • SHA512

    2028ffd8ec3cbf491ea5e096df600f5f03dfecc88352439be4faa2bdcdcac7cd0e51626680015dc56542a246fa64aa33e5e79cec87e6ff6452fabe1662618cc6

  • SSDEEP

    768:QTHbsVDMDjn8KUNfsWm7NxDJqAl6paB0JQHNbB4Cxvz7TG2KRdCLkWfjYGUHmowN:Q778KUJsWG5J0PebBPKYL/YG8tE1GhM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f853c6aa627c97541d49cff026e6b79b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4672a95fe58f621ee390f61f60c469cf

    SHA1

    5156c31d6d1322f524a2d86d9d4c475150fb1068

    SHA256

    b862537fcaa812379f14f8400d4f5587474ba2a52dc8459b08cd4c2d3bb32cc7

    SHA512

    987db337b86b49294f2e29544b73f540efb898be870b85ee25c403f74b6021bcb0aeb1920414163c7d5cc6ab72f6433d9594a9c57648c6437f380fae9e1b4ec0