Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 03:00

General

  • Target

    7f49e7aac4ed171554ba9579d36abec4_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    7f49e7aac4ed171554ba9579d36abec4

  • SHA1

    d19b04d03b53591d5a36d25a74706e52a94b5b67

  • SHA256

    13c511d1771fc57d2de34ae56a22e3d3d30237b7fd8d43fc4c9c9c38d7e72cda

  • SHA512

    70c60a5352cd36b73cdd620b14b3ddd51cfc910b772c7e405971a12ebb1d7ea3596b83237c33e30604bd17d0d92bdcfc7ef61458cf572888cd663a4baf9e9878

  • SSDEEP

    768:mXuMZmwgCLWar1E5HpxLVGxUFfaueEXTo4oDuze1bl5zUvLctiG0G:mXFZmGWSmjLVGxUFfauea2uze1blNmC7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7f49e7aac4ed171554ba9579d36abec4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2440

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dea606a604ef0bc8864027417afc74bf

    SHA1

    194c3641b31f16c9cce0910af771635ba585c7b3

    SHA256

    21b41ab98eb91fec30aaf3b8f811140351a29f3eaf0a98361f3a302c11a08b81

    SHA512

    ec212a76e545fc63c1bca996dd7cf77b91bc946f6b1b23a9efdf2086494a9ef951ce23c30c6329aff48ee360cf601516e00e97567966c3ad9554d4ad6857a777