Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 18:50

General

  • Target

    fd66b4b9c28e354a4c969abfe49d439c_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    fd66b4b9c28e354a4c969abfe49d439c

  • SHA1

    c4ef923932f5ec231816d58225c9a15f7ac50117

  • SHA256

    478552de3ede860f5d9f0275fe2dd013f05037ff8e748b4202103b2daa7e778b

  • SHA512

    a3a9b0254e43e2211df58d5d91026eb778a19deb4825386d03537fb4d23aadf3cd23d7a475d45b2008a2b7a16e0ab53c07a129a186e778dedbf3829fc1917759

  • SSDEEP

    1536:vQVo7uj01UWircAPE1pvGHKwnKV0YvNW6HBRs4/EN9U9xFWspORFOrn:orW7Ac1pvGqweXvxh/EN9U9xMRs

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fd66b4b9c28e354a4c969abfe49d439c_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5efaab759363914fa9864b8efe384578

    SHA1

    8f7e9b44d1eff737a3e772b1b1cc55d3b824644e

    SHA256

    4adc186a40397e4c32658913c26abe4da5758c7a6075e2adc32822d632eddd63

    SHA512

    610676e8290208e05c6a3a8c616236a32d88cd3e401297b23a121f204b0a0598371a03bda9edf4779325a5a17d6136252905c3c0de610d24b2dc79fbaa005b1d