Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 13:25

General

  • Target

    6371ee47785bfd7959c3ca2b3a4c90c3_JaffaCakes118.pdf

  • Size

    26KB

  • MD5

    6371ee47785bfd7959c3ca2b3a4c90c3

  • SHA1

    bd752dde8a057124ff53ed5b90a70384800c475b

  • SHA256

    469aa2d27b94242944514f3eee494fa7b4a69a9896c76b7e5f05f5bd8a3b01d8

  • SHA512

    1ed845d7e87821400022825c5b529f6446bae55d2a402d19a9ed4c8b1b3fba5279e981d5014f0e46fb99857e03b8d0913dbd2e5c3945389ec12e09f5c2d0567d

  • SSDEEP

    768:VzgzX5sYHGmpPzYiY6n5N16nwfgzzXp4dxhb6rsTQZiqnUvs38TBNVQreKv7Q7p3:FYdpxXi+rl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6371ee47785bfd7959c3ca2b3a4c90c3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0169f4ec5d2b5ae4af55f85427bdfab6

    SHA1

    e81f7feeab8327d1401caababbfd4f5c277c536a

    SHA256

    8329147839560589954fc4bbf5acbd17c1a05ebe01bd1d5250aeb18bf3e35671

    SHA512

    b3db991a27f1a7d51a244618b2af90ef762a4c2c459585ecc482bd272711715eaf51812c630598e9e35596c19db978289735e4791ccc76da412cf3e7701d0d29