Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 01:12

General

  • Target

    fb970034b5dbad7d0989751a710345db_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    fb970034b5dbad7d0989751a710345db

  • SHA1

    02d3d07344add6aedd56d2d47f2e6695d7544519

  • SHA256

    47fdb1985b40d706d75cfa2d1fa9a9b219b86f5defe2135a9242b3c900a8ec22

  • SHA512

    8bab22d85013d9eb959baa61c6bd138987e4256dc71c23dd79bc4e5d353d4118eb9cdf045ad86041680abd803a6d7f41d1e0bfea7b2ee35808a1dfddec7104bc

  • SSDEEP

    768:g2iLxaRjlEGM3M636Hzqx/Kfxs/rYRHdzeTi9J3pZR26BEUMFvxyqhCYPVEf:g1aRjlEKnuxo6r8qCUUGvxyqh1Of

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb970034b5dbad7d0989751a710345db_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    176586d77d4dff87d1aa3d764eae6f9f

    SHA1

    35add6d756b53f20bb3ddcbf1c3fa12e748d3aaa

    SHA256

    88aec5f254e8f8e9123b2749c7d4dd5eeb9d359c0266597da9f9c103372a50da

    SHA512

    e455bf8a503fdc5053284d088b5c5301b5f5b100211851c66bac2aa04975a862d2590fa1eb7cf33c7911c7009794a1c2ebcb18f57b15ef356248a1af8492b6aa