Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 10:26

General

  • Target

    ff118b65441b37b89c6c4a83e49bef36_JaffaCakes118.pdf

  • Size

    83KB

  • MD5

    ff118b65441b37b89c6c4a83e49bef36

  • SHA1

    aa6f82d859695384dd3540fba4a8b029d3a496fb

  • SHA256

    c025784911fd754dfe87626110a94f51cfc26cb6224af2960a2a57ca55a529c8

  • SHA512

    14f78c7bd543a9abab61f10e0e18ae3a31868d454763147174568a770ed57d1be41ba179ff160117189d05da214ed18bf98e4ad1c731d55f46f96a70d262b2ee

  • SSDEEP

    1536:3Zv20Dh/0r444TmYiMeaf5KzMO6jPu6cWcrXd7ofWUpO7/So:Z20Dt44SARKzMDjjE7oy7B

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff118b65441b37b89c6c4a83e49bef36_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    006cb9189ee79b5c9c1652dfc3e09632

    SHA1

    5105545e8a70a38cf09c52b5c2fc0b1d6fced70b

    SHA256

    f7d532e2f39cebe028cc784ed6166a3c1a8aebadafcf21d9b30dc6c2ebcc7b58

    SHA512

    0d731a8d21bef10bad7863d2b42097e2af3b3044fd1d0bee23d4e264c3e062d0a0ed79ec54b3320144d3119a7f2d222be1b946ac47cf26c9b9c7f20bbd490e29