Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/05/2024, 13:25

General

  • Target

    844d3a2f5b37a39b58e1743a455e02c6_JaffaCakes118.pdf

  • Size

    42KB

  • MD5

    844d3a2f5b37a39b58e1743a455e02c6

  • SHA1

    1ac99f9618943b14342ace461b6cf61e235afb1e

  • SHA256

    eeac62b743991daa7e3e4dafe34e04abac6812664f503e4f1fd71e7c8b29db52

  • SHA512

    9c23c66e688d7a4d98eb91dcdff7f4e59b65717d71910998da27a90c547fabd5e0b314688321bb92d9acd4f4369cea98e5ac6b56d23f9884f8182cb4f1ff2561

  • SSDEEP

    768:6gGzpDtfev2eLxRbQFZ0aTvK0w/mOmKcHDOn06b7VWdZZWJBpG3u+Y1Z33rrm5:nGF5eLP9mK0+06HVWdTWDIp2ZLrm5

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\844d3a2f5b37a39b58e1743a455e02c6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    aedbaa01120c458c3d94d3a04627201e

    SHA1

    1b0016e572870c1a2f685664eef91783df85fc5c

    SHA256

    a5c6ead7606efbadd0a71404af55bc5aa340daee10642b6a466014097d15f14d

    SHA512

    26871c998643c7d97512e3ebff72cba7973ff3f9fbf74f8223839584cc0cfee12a7c6a63a2bc3a451231d13a63363cf407a145d8458ae483144905c43cd45076