Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 07:11

General

  • Target

    febae2271f1be433c82bb2dce19ecbc3_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    febae2271f1be433c82bb2dce19ecbc3

  • SHA1

    90f746d4226279f8744f3ac642c38ee7135252f8

  • SHA256

    8f29baa4d6172b726fafd7e8ded5bb9b7ad0d612f921a101f19158c3467ef668

  • SHA512

    39bed3f6d8a6faff6d9d7b7f4f7bcc731fbc8856b4e2de009be728b7b08df03eaf39eae7b10d18a0f3065886ca5bcd7d891ce969fffb80c31ec5a7db05a09065

  • SSDEEP

    768:6gGzpDiRe2caR9DRkE+vALWMHLzQoMDab8jc+GZdQaoLDq6YejG0hELwX:nGF4euaab8jc+0dQNDuejG0hELwX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\febae2271f1be433c82bb2dce19ecbc3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1330c307f3ca2ca02166781ff3f66eca

    SHA1

    61fa17806935f51f1ff2da94c21a367216ed0db7

    SHA256

    e5e11f74c49d5a790a39b3c1198b4e9557053679d6ac082f419f85acf00d6635

    SHA512

    e41debc03ede23be0e80a296a4964cd455ef8d6aca9a023b5a2d4a05fe5dcf4a533fae2f210abcea49e5577428a68d33e337026f1b96d003d4e53f40fe1966de