Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 15:39

General

  • Target

    0ee7b40d15aabcd7fc9ecd48472405ce_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    0ee7b40d15aabcd7fc9ecd48472405ce

  • SHA1

    d8fbdd47c0cf7a266e77c49a284db82e0f6b33ca

  • SHA256

    dbd74f356073f7b5082f3c2cf767823259753c97bb96aa1d10ba9c07dc4fb7b2

  • SHA512

    72ab8a2b5b64fe013962aae84bfbee814edc383aaaca6157820680d304af1617f2fac9b5b3145f040fa0ea5f5a03ab43aa9c98269950ae2ffc98023ae1cbd6b8

  • SSDEEP

    768:mJiQGzPXour39XTVfi5tb2AjJvJlhQAp4e1opUEpQjSUMn77N2cmt0g:4JGzPXR3dVfqdXjgApnEGjSRN2cmt0g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0ee7b40d15aabcd7fc9ecd48472405ce_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9ee872cc2cbc06de8ab4499b107c1a32

    SHA1

    672312815feb51f30ea7899077fe3747892d442e

    SHA256

    a63ac0ea7e4a6da969265fd1a7feda706fe4fadebc7a3ae4431196c4488b966c

    SHA512

    0fbb392e9cf55ae80848f9a92e6a2919698e1ecf18584265fba476a3dcf7b795f46555d6edb4f12f52dc65e25d1a623c1633c3d25fa6c0a19a90cb79224e28b5