Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 18:59

General

  • Target

    767f871181301615df1b0d48c74bd78f_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    767f871181301615df1b0d48c74bd78f

  • SHA1

    616f0d921c3681eee3b0663fd380240a7a986ee8

  • SHA256

    6ab599f650d7b57509973faf10da15f364c779c37d0d340e0949664b6351e263

  • SHA512

    fab22844a579049892a11246aaf4b69caf1ac7fa918ab51039d37f2b29df52dd3c2e6c88a7b94d0092a0ec22c6bc435a813010b5a4c784e0bdcc1fdbdb00b578

  • SSDEEP

    768:UXuMZmwgCLWarfS+T1UGFb++xEsLtfovSlZ/NAaBF/TXTPrJLuWwAKQUMpB9tD:UXFZmGWSfSE1UGZus1ovSlZ/NAa7TjTJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\767f871181301615df1b0d48c74bd78f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1960

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    41ff0ca86deba3e4150517224b4f681e

    SHA1

    461105efb492faf40ddb3f00e5cd1de6afa5754c

    SHA256

    90c5aa7b88367d5af182a1ff440b14c99556e8f59476baee9371f1231d0e6834

    SHA512

    bc95d0c24ddcfd4c1eaa8c80d6c098aa3f747afa1d4a461fd8602e243d15d2608cdc3edacc8113137275156e5217f79b4b510a8e732c761b3607fc63b62a02ed