Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 22:08

General

  • Target

    4d3f9e82b1dc320bbef5986e28bdd4a9_JaffaCakes118.pdf

  • Size

    51KB

  • MD5

    4d3f9e82b1dc320bbef5986e28bdd4a9

  • SHA1

    156c6468f7dada5c6a9f6ef1e94e3ab5eca0dcc0

  • SHA256

    1902db6954531ea78517c9246a74e0593a754c2341a5a60a295728830aea65c0

  • SHA512

    d80e1cbf87e975133ff3dc5d216e1a171b23a9a51937b2c512f1b134787154301baca33abd37bb1ce4841977c6180bf397d452d9ebce25be56e4849a67b55d1f

  • SSDEEP

    1536:VgtHfCQP4vrx9hS5q3GqFdcpb3qDqThjo2gEzb+NXlnoHieqVkc6AFRDDZHzvuYN:Vgt/CS6Ekldqa+tsfOiJhitiX7DntLPN

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4d3f9e82b1dc320bbef5986e28bdd4a9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e8d3bd22679e429ec0eea452c518e28d

    SHA1

    fe50d93018a274fed0a74e7e84213817c3aafd8a

    SHA256

    b875006ed2e2a8e0c72cef157fbfd6dc86386c048672928e6e32210616656567

    SHA512

    55e13d13794c8d6ab3eb77576dcb8877d552046f54f86d8362be7d9493609b249c808d7d41331fb23cb2c5db9bfd304f5a13f2b4324329a1bff4d770beefa2e6