Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 18:04

General

  • Target

    fade24ec14d4c460fbf7c82413cb5955_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    fade24ec14d4c460fbf7c82413cb5955

  • SHA1

    cf0cc8cdce0db6abca3d91845f6dda785eeb2924

  • SHA256

    0335a3c1ae8b76a1ae2770bc2bf394a7273eb470dc0b2c5a7c2042961b28a202

  • SHA512

    1fb0d49d10ac6d3e998ea4ea6d89c361a55512f4370df9661b1f0704c6dd762a187fefe6e6cc9b07b62a79efd11417b99384e137207d9c3c2bdbc6d9c7c53bd4

  • SSDEEP

    1536:cogahm0yXfwaOcK5cWlSU/HThbLgp6enImtx+AhTub6UrKjp1LYW:5m09aPK0gNY/nImeAs6U015

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fade24ec14d4c460fbf7c82413cb5955_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9d868115aecd42d977e639270c517c4f

    SHA1

    77687ff04ac39367dad8fba9f46ec941c28edacd

    SHA256

    a93a29040b465d15d184807bf6d4ddafe98a59347de2df94dadac3fa9176edc1

    SHA512

    6cfd0054b860a25c503fb25a039fdc348bf7d6ade8ba49cdb1f6f35696918b2331831ae193e0242d89345015fa23d1c42c618dc9c79b2b43afd4a1317c82d64f