Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 05:39

General

  • Target

    0924df91dead8176f331292674901a23_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    0924df91dead8176f331292674901a23

  • SHA1

    ec7cbe6a3323de974a775def261f48902536a954

  • SHA256

    19ea33880b218389c4d110d64431049b12338826686dbe824d2185f87c9dad25

  • SHA512

    eb06ff5a90ccc43b1dabd0c3add28773d025fdfbe95311f62e9646f177d96cf0f11c2da4eaf0435fd055a0a83682d2cc19720ea6423789f15420b6594ea33243

  • SSDEEP

    768:QXuMZmwgCLWarUE5HpxdtrwPD4k6LhmXc84uadgGFIDPMts5ljzK/7hX95VJwjMB:QXFZmGWSNjdtrwPD4k6LhmXc84uadgGR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0924df91dead8176f331292674901a23_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1932

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c5fbbf4d2883025c7cef22d0c7ec5e5e

    SHA1

    6b552f00c7a17d8746b66ef5c081b02205dcf603

    SHA256

    3a4f74a87a09b90bba6e26145c36bfd2a24be8dd7dcf9931125804e0b38f0d7e

    SHA512

    daa5393b6365008d293fa99db69dd3797746d6eac97576ed5a8e994416cfc369e39947b6c705a76751e339c1f838cccf3e44276409ae0f846431bac7ab6f67e0