Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 02:57

General

  • Target

    15ab98a5ae7ab27b720d55887afea915_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    15ab98a5ae7ab27b720d55887afea915

  • SHA1

    c3600c31c295c2eaf265eb319acd49efac392b85

  • SHA256

    7bc7bd07eb1ae04f14dd1ad7d6666c17624b84666b0e4017009ce023491f4b9f

  • SHA512

    4509d49f2d0d49df7c1ca0e27630f802f4e689eddab8805118866360a235d6795c076262b9c6b0b7dce820f2d6aa99ae9a85d1cf215c749f755dcde93f0dce1e

  • SSDEEP

    768:4gGzpDv075Wt8bxbSB5h7TUf3xaEG8xqrDugGmIgKLEu+iBWp1IzqsqYieC:VGFThM/xDdEmgGmdKgPiBQImRJB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\15ab98a5ae7ab27b720d55887afea915_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3004

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c6c472f0682aa63b106358211103f076

    SHA1

    be4c1f4605b013dccce45f82817f72a0d443d525

    SHA256

    1432facd4fc30ac7e5da21d24392e7c0e945a28dd13958f94f1273b05d7aa44e

    SHA512

    646ee66801499ddb4a37722bfb56e02b7d9a5b48cb760d5f50372025f2cc3dbadd267d5254e43d29d6dd6899849a8953823cd630c53dad13b6c4ff69c1f88799