Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 21:54

General

  • Target

    8210a7f57ff93b4d62c901df9ea3f570_JaffaCakes118.pdf

  • Size

    52KB

  • MD5

    8210a7f57ff93b4d62c901df9ea3f570

  • SHA1

    6cedad4aab8a5a8f57d08c1b4f6c49d5c143d3c6

  • SHA256

    fc35da2f622fe9cde2dcabc50f918ac1d4e0ccefdfd344ff19f1a0dd2187f47a

  • SHA512

    26500f2640dc7cfbbfe7171a6d537e788f870c2738ba8c0e4abbd7f281772a51c844e63498eefc3645edd50e54e627f6e3a2ae5c3ea1a812e7b07f74066d3021

  • SSDEEP

    768:2gGzpDyBVksi8liFLVShWda7DngCJRKQULoXD7FlRaoJxv5bNpJjgZwTGXDNAf3c:jGFmTLgS7aqbHbNpJjgZwToNAKqo4YJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8210a7f57ff93b4d62c901df9ea3f570_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    61b2e3595b8bed04ef1a7bd3a17eae24

    SHA1

    f6c535548e6fc4f4a55edac731ad47ead83c755c

    SHA256

    27ee51df1c6d6578fb8476ef93d6b6540d00873b05ca7ad39894ed2095134f73

    SHA512

    30854e01d58b5193fe2d24a735092c2c85c8af624c6ff16022540682080bfd8857b7f700cc1f86b4fb6051c0b349436ad6b46afdb9d96603128b9149fd151190