Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 12:16

General

  • Target

    791ff167973f22d41b21bc7ef1e66f0e_JaffaCakes118.pdf

  • Size

    17KB

  • MD5

    791ff167973f22d41b21bc7ef1e66f0e

  • SHA1

    e2be00e5a286d5c289cc7e3e64ed8a4d5ffc34cf

  • SHA256

    44d3c78823a42b399d8d70204c9ead73cdacd30e8634b4aa68309a26e4382fc8

  • SHA512

    fda4335167138c33cb8b297f80e0885de775be9b0532fa039700e8413f24512ec24a8dcb15e3c9794d42ad5facf6d083518f1030ce36056728b1863c8dc8fb96

  • SSDEEP

    384:Vz7Azlzdz176OXfxvceZ5xJG5z9SdbEh/RkktWpuByQQx/d08fQl9j:VzMzlzdz12+fxvceZ5xJG5pSdIh/RkbU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\791ff167973f22d41b21bc7ef1e66f0e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1284

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    87977e5290a8cbc5f02491e1fdfbf2ef

    SHA1

    754c2d4142703e9b7914205339c887c4033a1129

    SHA256

    87e635629940d862c50466201e82dac8745b04da1eec920a7a98b96724ae6fc1

    SHA512

    0ebd6da317fab075b8593c630dc715eab502839ba3c12bf5a3157d19e80e937ceda42fe0a1203c5ee674aaf92b2bd0cd83aab1202e4bbd7651a4606234808d32