Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 06:27

General

  • Target

    44e37eadefa76aefe38860dceb8da172_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    44e37eadefa76aefe38860dceb8da172

  • SHA1

    e53e99b639cefd7d7f26d4cec1bd03a57e510872

  • SHA256

    214fca2ac702d2f27429e55af00dd0b902946700376c11220aa52148d6dcc9c2

  • SHA512

    b2105ad114dfd3d03938b14903f69b5c99d5e98f2bca717bc6c4901d65afa6d9c660015ebd1bba1fbd82ab99f97c3857991b727aacb8fcc3f41d8d88f18ed1fc

  • SSDEEP

    768:NXuMZmwgCLWar7wSBbRDry6fq8j+SidqZeijjnVsdv9MYDMajWbrVt7U0cBhs:NXFZmGWS7ZBbRDry6q8j+SidqZecjVsa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\44e37eadefa76aefe38860dceb8da172_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cc316f2811fa2ae14a453953a37f2764

    SHA1

    5dc6240c88b00e48b6dea450ff8b17bb08e061fe

    SHA256

    633e07f1787e2be5c0c16e783782990a0e39d98d220bf24f39cfc334a5668048

    SHA512

    9a5b7b2c7669c62c9f5e5f7f56d71acf23b38bdce6e0573b0d6717ad554d099bb36a9bdbcc587886fe8ff507d280c44663a0ab44c0e083350e4577b17c45363f