Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 18:46

General

  • Target

    4787a04b6c34ea44a2165eea40c80b9f_JaffaCakes118.pdf

  • Size

    54KB

  • MD5

    4787a04b6c34ea44a2165eea40c80b9f

  • SHA1

    2d7b602c9805c3837c901831dd05bf07a678f43d

  • SHA256

    73181c8b7de775fbe34aa2b59dbc905330dedc795f3cace81505f8647523987b

  • SHA512

    df47ded4f18c84b066af2aa3d3d8fea9205bafcf34e7831796eb0d4f743427e1f1bbcc64cf0aaccb54b356e1bf096a4c445d6576e99268f41dfbcfbbeb255839

  • SSDEEP

    1536:5XFZmGWSN/HpBCk+imQzuOQWU8COltC6XGwJYkRCX6YC79uZ:pysxHp6/8hfGk0XTT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4787a04b6c34ea44a2165eea40c80b9f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    739cedde510c61e354b670ed2f0be6eb

    SHA1

    7678d80203d3684cc2d77eeea139da1b7da115e9

    SHA256

    17e449b165b98bdff6259316e699fba7de37912ee2ce2a96a1d89541c6ce79b0

    SHA512

    ea5aaf91b41c52cd9316e3098ccacc0e34a3fd69f0055393c42af7ca05589d02a80b63ab60c3b3cb2fe294f6c840ee6ec06661e38c19ea213a1c454e4dc45660