Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 22:51

General

  • Target

    77115c70e8c614cf6c7d45f1b648c572_JaffaCakes118.pdf

  • Size

    43KB

  • MD5

    77115c70e8c614cf6c7d45f1b648c572

  • SHA1

    e66a88240c4b9618758a096bff292b90a80f2fad

  • SHA256

    5055392370415e01417348185b1b82ed58aecebe123342f729ba63bda5ed0916

  • SHA512

    ae18696ab2a46790feb6eee0f1f34e68f48db415573aa4f976f23bd176150284e32ae8c04b14cda6bcd986ea7aba00df9ac539d0705972b19214a441b5c4107f

  • SSDEEP

    768:4gGzpDQpBohsE62lizxHUQLhe7nh6loB5xdnyugOqsE+KCknALq97GTR9M:VGFUpBcsE/liOJnhRXxByugOqsd8ALud

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\77115c70e8c614cf6c7d45f1b648c572_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1660

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b1676a9feced9e23d0a202df507e258c

    SHA1

    9a6b35ee6b37f2966c0c639ed309d3cfc08c948a

    SHA256

    980d4e90da8d948486db062b70b5f6119c9ac6d75546043bc62f214006c18725

    SHA512

    a388e5b2ad2214e0ab226834d9cb5eabb7b84f02b6712b9f26d0c37291c55bddc87e199a437010ff2ddbdbe1ffbebfb17730bf91d67c702edab672bd74d620e2