Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 05:20

General

  • Target

    1627c48cb19e0aa58fbda9b6c4bee013_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    1627c48cb19e0aa58fbda9b6c4bee013

  • SHA1

    1494d4c6749b9fd1d9d17ce0978d0241ae38d700

  • SHA256

    87f18250e1287d7ffecc61da6c772dacfd0d60418c5479bfe0001cec0ceb7878

  • SHA512

    6199578b71f3945baf9e9d86147d89f6edbd300a0ed3192b5720df0345068be915a06cbf45c3aaccb90200b9ca8e097fc3087cb6a0b8c6b3c9281650cc6ee5dd

  • SSDEEP

    768:8XuMZmwgCLWarz0ybD/xb/PtV6+BvhnwasnXnz/zebIIASP:8XFZmGWSwIDNPH6+T0TybII/P

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1627c48cb19e0aa58fbda9b6c4bee013_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0c02c19061474233876a2430bd80928a

    SHA1

    884694be52f1b5ba2c485e3e3ed615dff0b22926

    SHA256

    0f85d22dcdb2b0c1ebe89083ee040eb088108d7f55ea7cb266e5fa37d645bf25

    SHA512

    32a546050cc1283c96473c71354ad5b72dd381af63dc433111aa9c452065687990f429da9098bdc521d0b4a3f6a08cc00540cbcbdb4707018c9992fa377dbdd7