Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 03:27

General

  • Target

    2816cf5a382947afd6e729ea8ab35c70_JaffaCakes118.pdf

  • Size

    185KB

  • MD5

    2816cf5a382947afd6e729ea8ab35c70

  • SHA1

    13469d3c1355b3d280aee3684b244e09541b67b1

  • SHA256

    2639e23c92ece3797f2941810d147eeb71b87ed7beed513f1e7be85cf04d87f0

  • SHA512

    1b437328843fdcc8f8b010b51c968b9b963abcf05f4baeec28ea99a45fd5a8674f3df710ba7199994c08b1cfafe51ffc75c9b9e5a58f5999857ea98dea61c625

  • SSDEEP

    3072:E2irbxzGAFYDMxud7fKg3dXVmbOn5ug6KjnH9JKeacbmw5u2WSw:E2MKlWQ7Sg3d4bO5Chz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2816cf5a382947afd6e729ea8ab35c70_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2928

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7fa7df918f408d498f6041890c2500e5

    SHA1

    b3e0b3544a1b91b8983ac6cd9edff510851ea195

    SHA256

    7b8546be1f14c07d6dc664c888b0ae4e46af7e031d7ad2bce88c48ef21655688

    SHA512

    6e0e18b0f238eccf949c62aa5fbc6422582525c3cfe1054d9485f2567c010f09003bcbb9acb160a6a1741eb25b4e56819937acfec38ce4119cc53de7c17115c2