Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 06:58

General

  • Target

    09472f149c1bd0131cb3e0cbd08e0bed_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    09472f149c1bd0131cb3e0cbd08e0bed

  • SHA1

    0f87f77761b35667e6daddc34bdcc3b893b53000

  • SHA256

    4dc3be65624dcbe8e854c38adef6ef5d53d21bac9de4494166c5cdef7eb2ed28

  • SHA512

    0a7e2c7f55c4f95049c1dce245df5d8ca64b959a8d746acb3cc966806d9862a196d28ef5b6352ec329a98c16f119e7a5e08b7fd3e65990f5ca087e92f61b9bb5

  • SSDEEP

    768:wgGzpDmdp7LHa+XjYpCFriFH7rYOzAZSxAgH6AekCMDhk0CpJZ8l4Ic3HAX8Za:dGFqpr8AgH6ANdVqZ2+k8Za

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\09472f149c1bd0131cb3e0cbd08e0bed_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2080

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c2ed4353def264ac3acb0ebcfffd92f1

    SHA1

    7fb51728dba8941e25b15c1d9e89061393531781

    SHA256

    ffb4fdbef9a9a142bd439045b31dceb5be072ca116dfcb02e3ade9cfca3344c4

    SHA512

    7e2a94e0b66940cdcbf0f3603b156f3faf9d44eb8f295e24059d45ff06ca2e8ebbc21dfa8b48a700d15ba5234fa7cd3143c4a16e23d1bb4e0c005447814f3cf5