Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 00:40

General

  • Target

    fb881b196669d8f69d7944119f296213_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    fb881b196669d8f69d7944119f296213

  • SHA1

    d8da4d30a86b2c611a6a4544ca1060d7269f1f54

  • SHA256

    7fec5634770dcb358ba04bc130ba6a295305680e190d44f341e1657f805df4e7

  • SHA512

    b80965f2ccd2a71b6a644097062e3ca1cda1df40f2a4e94e18c5075fefd66ac9ea320e309913855a4f942209c647466c40c29a96971e92c512705dd7d90ad2aa

  • SSDEEP

    1536:sOiSXCC52VT0SeCv+kqQv6IoyCOSefJ8DVhg0LLUQpWYpO2elfNWP2oLRzAGez:3Rn52pvGsaOSexkWYA2elf+HLRzAR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb881b196669d8f69d7944119f296213_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    daf4100be0576d3225985bc436d17191

    SHA1

    9f1c160690edb50594392f6c6e74cc0ab616ecf9

    SHA256

    fab94b25941ffb2c84fd3dbe6ad96ff854fb68d23da49ba18dbb5ff6c8134092

    SHA512

    a8dbe39fe7734f6060cb4df3c4ff2fd50a2d2ee03b57413bf99f2317a81d109147cac2c11d6eddb8b95bbd791007f11c44398be6740714246b414eb175e82f75