Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 04:22

General

  • Target

    383bc70e618fba988a6155611af65e2a_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    383bc70e618fba988a6155611af65e2a

  • SHA1

    c1836b0c739fa63620df83c619305a0ab08cb2a1

  • SHA256

    c0a4a9358689cae23dbdd753b196cb64dcfe48292e2e86a1f07d11e21f0b9191

  • SHA512

    b2511031008b091ba23fd58e4a168511fe3d6d6f899774baf4cdee2cf70e65127cade858c0cba14c845f9552496a86977cd9cc0a0860363d873d12f5182ef8b3

  • SSDEEP

    768:3gGzpDhlF88KQLt9SUDBYPxAtAvJVc23bZk7hXggCca9GMu745n/7shTQ+4OU8w3:QGFN/t0c23bZghRiu7E7shTQ+I8wESr5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\383bc70e618fba988a6155611af65e2a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    28ecfbabb5f5dcd2117afbb05ee40ddb

    SHA1

    be34881c7d06fd407b43ffb69f2d9741980471da

    SHA256

    48ef3235b889080b51fd14423ea01f267555dfb4913f954877a841d17a632d8f

    SHA512

    7cda677a57c053edaa0bd5fb323cdf6293179727d3d62e92d585a9d928e1877d7f4be9155321d1a03df92534a493f07926c252f759d62fea41911cb99f258fb3