Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 02:10

General

  • Target

    32300cc82882d0763fdf16a7321afa83_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    32300cc82882d0763fdf16a7321afa83

  • SHA1

    caee6efefbb8ff77c94e1c39f9d864c619b18f1e

  • SHA256

    50a21de4a52f273fe4fc82fc458651fd4e9d7496f29acd27a532ad70d85d3fbd

  • SHA512

    ce43e1212bacdf5a386115d7f2eb5f5533e26a7d188c4c2471f9fd56adb67c466c785d6e1b71e84f1b708d866a7044a55598710ecc015662ad799f3123804574

  • SSDEEP

    768:xXuMZmwgCLWarJeUH3nF+u475b/dIfHnZbwtMnQWi8reMGnCPLghppkYpw1EFFDh:xXFZmGWSJeUXnt475b/dEHnZbx1FreMk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\32300cc82882d0763fdf16a7321afa83_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7be58ae2dfd4ca2ec261c764488b49bc

    SHA1

    c6a8167e4001fd2f218007c05eafe9b3bd7c1030

    SHA256

    f3f1040cda169e52d95d7a19e95c51715c938219ca2b4454e2cb06dc63c0be29

    SHA512

    d3ca09ecb831c54de56d284792ef9f52b89220dc79301aa49a3131991009418afb3eafec3e2417d562eaf2a8cda9172f1b035d99a80286f2e05a4cf5c94972d2