Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 00:32

General

  • Target

    5c481d83538b34ca714ceda452a6b244_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    5c481d83538b34ca714ceda452a6b244

  • SHA1

    0b6c3d73e611aa895f18f5aa24975531845dbf69

  • SHA256

    aeb98d344ecd788caef566a977f0de30b67e11bfdd066c5e1bdb92be780ca58b

  • SHA512

    7da73fbd697b919651fd1f6e80820cd07c193df53787097246983162f2fdf8a424c3f5c52ff1e0a1f663859ed5e7ccfd6204117280cc37773281b14c54869195

  • SSDEEP

    384:VzFJpoYqa622EaHKIYxZt2ke9C/Y1kBw3obFrjo3xnTdf7Ue/WX/IiNViAQlGZSh:Vz3pZqWAxicxI+Gw4FUTdTLuQLBfYbQr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5c481d83538b34ca714ceda452a6b244_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2256

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bf9bc77b05ad2a6e6913b2896c2b75e0

    SHA1

    13ce6b30cf6605820a21f20231c46183f6f34b2e

    SHA256

    97861bdf4f211b474f0db5a42221775ddb00c0c6a0fccc71b818e96106c7cf26

    SHA512

    5e0afae146f254068b76013c0cbe4373deb8a638828fbca1f6ad2d36908948535e931767b4a4ba20f828aee39b090732c17a69e3481fd7010cfbcc7ef0012b69