Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 14:59

General

  • Target

    133b525da76d79dc01e2af5667cd7c08_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    133b525da76d79dc01e2af5667cd7c08

  • SHA1

    a594d6d6a7884dd018dc993a2a45874381633f11

  • SHA256

    d10ccd00fcf9fb507418d6b9266657b0c0e962a52ace0f060997c27a94c3f2de

  • SHA512

    184d247f84c2e0ffeabc499d3aa4e6ee39ba6b00a56a0c197b263285dea5fd23f22907cc654198651125c3f74e11347657b4ee31502fa511007aaa7319117534

  • SSDEEP

    768:EbZk29CGxVAd4BDmnM6XV7GDWXKcXMPYQQJ3t7sdhsddVHa8BykB7fd5p8bwRvgA:Ez9CG7urbyO0b0N23QUcbV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\133b525da76d79dc01e2af5667cd7c08_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    81ecaed3306df76f7354310c9de8c298

    SHA1

    567a8cbb0a0e53924776cfdcf08615ab731fe4b7

    SHA256

    016bb6a5deebbe1fccc898d055270ce66063a3c85117ed304f5a1941cfae6c37

    SHA512

    e468c81699b8782d63f936e090f4cfa52900d218c13b14af355a96bbad17e26c902b83d3f632dcd8081eea24f2addad66903d0343b33b7d7379ef319443cd4cb