Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 14:43

General

  • Target

    132c57ce7e482968332d0e3ca528cd2f_JaffaCakes118.pdf

  • Size

    51KB

  • MD5

    132c57ce7e482968332d0e3ca528cd2f

  • SHA1

    2be4cdc935af76a58aa92dc29711f2f9f33e4dd4

  • SHA256

    b8176315ec39577ae25429f179b29b9580bfa73d1e726e017af95e6202e130b2

  • SHA512

    18824803a67cbccecc16c78fc0500c242198bf9f2a6e877359bc7a35953dc63859f0a7b25ad99d2a1e3f4e899b54f22dde8e9a880232c5b194c424f6e5f0add6

  • SSDEEP

    1536:DXFZmGWS18pGeqN9U1hAYAzVA9uSkBR+MKEL7gQbAthob5Y:jys1bAlkBR17gAALoC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\132c57ce7e482968332d0e3ca528cd2f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2360

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bb7320b859238038e7f7db126b7f78f9

    SHA1

    a739f5751cdd9036ecc0c9eebca6d87ed96a5198

    SHA256

    e3d777799f51691d76684852ff030fd6aaf90fb73f2cafb7dddfca6a7af31904

    SHA512

    fd7e40b6fbf7a82f731fe0845c848a437d610aab63f8c3428d0a6f93259232e4497829c077fc08d47bfa60e53fe19585c76a9ec153125dfbcc4e17d72cc20d5d