Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 17:48

General

  • Target

    0a40e33279b4360642c35313f6ab9dbe_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    0a40e33279b4360642c35313f6ab9dbe

  • SHA1

    0de6d65a6bf076f74a1dff31e80933f3485fb61f

  • SHA256

    0be5d81fa0d785fccf70d18d3e17585eb68aefc3c84c2b7b6a2fcc97c3a68433

  • SHA512

    cea1526647ea1c582647fa5c81c70cfe69ef00173e384bff3855feae8a17eacc0aa2d8cd1bb4d1d0687414b099d974614584b71b9b540b3aa395ac7e430eb7ea

  • SSDEEP

    768:ggGzpD4SVX0WicpR0hpkZTFswxwrUu+ZG2BjTUktQuit6poCE5i8CpUJxJDCVWB5:tGF8SVPwrZ6Bj3tQucmoCE1lDgauCIw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0a40e33279b4360642c35313f6ab9dbe_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dbe94f9b15df191bb19d19a8c161afb1

    SHA1

    334f7796a297267f76b201466534cef450bea489

    SHA256

    54370bf5952c8fec15140df851bb881890b981d9f21c08dd4d846e401b3d3ddd

    SHA512

    cce7c75cebae43285843d7de29540a616d85f2ab404b2c79e9b91c7cfab4f0562e27a52595227b15562e61961739530c9e2a387df1e47400a1e072e5fc65aaad