Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 16:47

General

  • Target

    7dab8bc90a64491c1184f886dfa94865_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    7dab8bc90a64491c1184f886dfa94865

  • SHA1

    0ec316e74bc2b24d683712d1c5e9ac48feb3f600

  • SHA256

    9feae7d9853c6199a486ff6251564f97ab388392554f81cbee714044f000acf5

  • SHA512

    31aca432cf1744ce9d166ce51ebf09dba64dadb1c6a4ad921d604a7bdc9715925ede31887609f6a46c6899a1ed449b5ec8f7b7ca74b44459f7a795389b52902c

  • SSDEEP

    768:jgGzpDhpWMw1JKAafHeZTb6pG5shOsheOYTMp4YO5DkeWtoXUOwlZEmhpMD2v:cGFNp06pGehFeOKS4YGnWSwEmMD2v

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7dab8bc90a64491c1184f886dfa94865_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6515e300ad3c1724af67daf419a6b54f

    SHA1

    42d5da9745d31acc8aeaff0cd35372941ff54bef

    SHA256

    9a63145d7f1c7f4bce8489ec3690bcca659dbfb975329e44e25e1f3b63d89d6a

    SHA512

    483fb0a81292aac8037964f20d7d685cce4dcf0735e82423fe77cf2efc3c509debd57855f4dcce29890713cba6e21c7aba2fcb82a40c90d969c4eb59c31172b6