Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 03:48

General

  • Target

    f97050aa6a5f8bd62982135d454bcbb3_JaffaCakes118.pdf

  • Size

    71KB

  • MD5

    f97050aa6a5f8bd62982135d454bcbb3

  • SHA1

    a92324b0ebf0fe5daed7867e9aab510daf584e94

  • SHA256

    1c826dd73ad93a6a40dd355b69ab8f5346b0052159fedce49631d2bf92339b07

  • SHA512

    c32fad58201134fc278bd4ad46cbbce0113ceea1cd201af6068668c357fb6fc87f346de94676f52448758d4b2ff8bc70b078dd08690e61c4103b5706b2657c59

  • SSDEEP

    1536:L7NDA7cxtH+kez1SnGNNsHBSTMMmZWeK939DBbAZRGzIZroz4:fi7cz+J1SGPs4t+K/DBbKRGzy7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f97050aa6a5f8bd62982135d454bcbb3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ed8612c3d5f3e1c108957e9383101087

    SHA1

    60541faa655eed3781e45c016cf5e9c212afe2fb

    SHA256

    b9274d13259a5db7aa53d2734194fdb7245e7e0defeb72f1827bdb01f6091972

    SHA512

    c650ea7cc5a2a1d4f5d7917c3e0c4e0bf51e9c142c34014a2400c6450b79afeb2c3ce97c0d6d65407d4516d6ec684bbb51be85765786419ee851b7bac5c5de2e