Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 19:21

General

  • Target

    7a3c86a7fd43d81774fbe21515051cb7_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    7a3c86a7fd43d81774fbe21515051cb7

  • SHA1

    ef8c8d3f2db1492f4bf5df02ef2512e6ca97e3cf

  • SHA256

    30312cc6a47ec232f5853c334e35ea683c82e95b7b4a29d7bacefcf4b1518f49

  • SHA512

    2552a2d8020d746b617b61f3c926950c3294a9816ae287735670fdce3e756ef7e42d89a8804e7f011bd8a2ce5196aeb1c3798a87ffbce6316ee92dd4202495b9

  • SSDEEP

    768:ugGzpDyBVksi8nJ5lE+aX9zNqUWYUbLJUpxEKiF6mBuzjhqXC3TmaCKxls:LGFmwWY+LJGEx6mMjh33THCKxls

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7a3c86a7fd43d81774fbe21515051cb7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2168

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    83c0844cdf96c8628e15294a76164428

    SHA1

    226be052bb61a76b9edd670dd942b2e6f57dbb8a

    SHA256

    3d713bd370ccd721aa3f41d360208e3ec47167e8e72144aed38618d0c5a2aa6d

    SHA512

    5ac3d6906c5dab9d5afab240b7e779d24f70a78db0cca027b84cfaf44e2f57b293512788387809bcc036b5ad6c579dbabd0574d05a0426e772386b1f7e37980f