Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 23:09

General

  • Target

    fddde3c5410b87eed0fa410fda66d1f8_JaffaCakes118.pdf

  • Size

    63KB

  • MD5

    fddde3c5410b87eed0fa410fda66d1f8

  • SHA1

    32b282fcc978f1f92a9854cd3d7942aed8489cd3

  • SHA256

    59519a1ed17888c6a531bae680df6b1376406195e4274d7fc6814f18b2a1152b

  • SHA512

    5988ea91f55e361fcbf542004f7fb0366fcd052f6295dec13c3fcf3ed71452194ee59c107d86be68e925cca2ba2bca5a02b1196feed3bf5c1ea41aceac5478b1

  • SSDEEP

    1536:Ao6aLUn7uPdhzPMRHPEG7ep1wrJGHeEcQlylxAj139I:AaLUn7EdhzPc8UiwTA8i1C

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fddde3c5410b87eed0fa410fda66d1f8_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1940

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b41c610c04941283f046fdf96be0a5f5

    SHA1

    b3b2b69b61255e2df378d01e934a21206c9e51c6

    SHA256

    08e89255a2a5d04d5205c5690a3bc9e19c147c0ebbbe59b2e6cf4a191ac56353

    SHA512

    aeda4316a4760ac72d16903e8277770ee10569d03ffbb420a5872209dab8b9332124e7f7cedeb65079b6ea6bd42eaac78496a3f98d594ff281125923d73a852c