Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 11:36

General

  • Target

    ff308cf65bf053a653c4ae6d7526b3f1_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    ff308cf65bf053a653c4ae6d7526b3f1

  • SHA1

    b9f950c24d1a0c688b6fbc2a4e9d2bd39f975496

  • SHA256

    20ff535e1ce91b5c2131aaf4631cc2947253ea079cbbb22aa162fd3f39c98f47

  • SHA512

    cd7ea043239cff1f7ad19f7ed4aedd5ce57affd9c616ae391d38a979c0d75c7f16e88072b7a86eedf51de2177ea18d4de2eb6b52312fce44b1089f438cf2ec7b

  • SSDEEP

    768:jHuxEhihMHuPa0bdwCjOKB61bKsWKAgA2/YWhz83zhbsW:TKEhimOPlb1UVWKXAXW9831bsW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff308cf65bf053a653c4ae6d7526b3f1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e60f327766a8acdca79ae1630e04ad44

    SHA1

    7d0550d77c293bb9116c6c98a884fd79dcc6b24f

    SHA256

    abf44831b7199dddc52c8f561ac4f6f003a98b1f330fa701f959d1b2aec3ff2b

    SHA512

    084d652f4096425d7ec4dc42c94bedbed7c47f2f592956dc72e4e0ba0f52439e3d691c62bdd9b4b5b1a2ae49f8fae828ba4966775e3b2c1b9a22fc021aed80d1