Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 09:23 UTC

General

  • Target

    fc6f31db94402e9744ab16a554bfbfaf_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    fc6f31db94402e9744ab16a554bfbfaf

  • SHA1

    5526b3c1c6ab828214fa7bd963cb643ddc92635d

  • SHA256

    3bab08381895491d0b18a494d965214825ae585fd7ad63f01d5a0df8287573ab

  • SHA512

    bf42418684e57012f87ba436f0abc868223eccca514e4b91e06e31c4d504fe6323e7dcc0e44e63f906907de8e62fdcf20480c435b699c939feb81671ec0f86e5

  • SSDEEP

    1536:b8rGDz6Rum9V8MPzdQ36/P4p5WxApOGzWDVwB9V1butwIDPYgr4k:GGXfO8MPza903GAVkIDPLrT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc6f31db94402e9744ab16a554bfbfaf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e305a48ab087048111d2db5487593bf7

    SHA1

    941f2e9bff8bd178eeef72380189e6f8ff464a2d

    SHA256

    e1725520dd11d04899c9461b011538ecd62880f496843f7d3fc263d88b54a2b0

    SHA512

    8a1389b935151dbfa2d2249e31fc64ea14b8131db0ef5e07eb761ea740da0ec16bc5ea8cd62e9830b2c6703a04e82820436a86ee1fec4509836e2f3e160ebc78

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.