Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 01:14

General

  • Target

    021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    021355deb962d025c66059f2d68e5e37

  • SHA1

    3b272766aca2bf42f72aff011169a4312bab599f

  • SHA256

    33f7331f08d92e35128971b6a4ec78a16f8217756826474e542a9618b03c40d1

  • SHA512

    5d35637e0801406494a8d70c50216eb1ad64522dd108d721d152d75248740c4db8752352e783fdeb5282861144d4987a15422354688b47af73c80ddffe2e4d99

  • SSDEEP

    768:KgGzpD2bqqWc2GnyNs0CvWt2ERU/8nSf3L49NxgRwGQThPNbGgmtn2CVWKkXFT:XGFCbqhRW8SvcPfZTfXmtn2g1kXFT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\021355deb962d025c66059f2d68e5e37_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1760

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c4c77381641f38d0206bcd20d07581a4

    SHA1

    ce6615f07cd4d6e980a92473262fc7650929e52c

    SHA256

    87e9dd84331fb021eeec640ee3b3ee544e778e7556a46f7547ce335221cb210d

    SHA512

    76791c9d08774c4329fb48745267883ec5c9ee9711d9ffc882db6f9d4cc5f00fa38c16ea09627544eaa3c90c34b2d68f85a10c01aa4f43cef76b38c23fe17389