Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 04:09

General

  • Target

    65f31daa764066d235f34215ea4d39e1_JaffaCakes118.pdf

  • Size

    47KB

  • MD5

    65f31daa764066d235f34215ea4d39e1

  • SHA1

    901411edd86755e5307f9225904bb4e25f8cdff7

  • SHA256

    e4866980f6ea6f4f3da08cf37c3a3f69d32fe3b1655178ba24583bd01ddc33ad

  • SHA512

    ec9ce16b0e16e3aa92f54d8a556ff2636437ae1ecd3e82e75b6811cb3e357a99fe8006ab852fc5f6465b4921a382551e391c8fe2ac79e9d05559e50bb0349fb6

  • SSDEEP

    768:KgGzpDzBfr6WfsRAeiuavMxHLdgPWziC9M4T2s6sUeQkTys/UDF2nuBP6iMk34b:XGFXBfFM1q4iWjQknxny6iMk34b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\65f31daa764066d235f34215ea4d39e1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2132

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b64f307da3e04ca0e19368b105d1c122

    SHA1

    64afad8bcc8198e871682614e8816b5f8a1ce12a

    SHA256

    d234152725d37167e58654d97e1f124c8f99d2a34053914f123d95ebd6b5c716

    SHA512

    f9976e46ffdd318851610ff8a41895237851bd0d3573658d915d269e053cd5c8b64cb3c854b5154bad87320de62d14b2ef9b5344f80f0ef70ead45eaa74766e4