Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 01:36

General

  • Target

    859c3372bf6719167c15f47d59c2c458_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    859c3372bf6719167c15f47d59c2c458

  • SHA1

    f74ddff100672ba11547475bdc6786901deb8389

  • SHA256

    25fed4537897c4263b42903946db62a669cb0b8609db5ee416f1e6a6f085a495

  • SHA512

    de0954a6efd248d78d5d507fa60f6c061c48eb27b1385d51608e1f0dda76af2e2d2271c0ce4be212523faeeebee3dc2d8a409cc28e6ede02f8cd26133d7b78fc

  • SSDEEP

    768:egGzpDJpDxNe7u6nK26MGmFgJw4JmkOFxF/UytdIdvMRu6vcyKJ8b:bGFNpGmLAxFF4uZxKJ8b

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\859c3372bf6719167c15f47d59c2c458_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1648

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c0f8a6ceb444c83f18a308fa682f3a1a

    SHA1

    f2edf465c57bb12c4bf8e4bfd412591b986681b9

    SHA256

    37b3e801fbb5fbd01751e08ccc5a2202418de54e5fc01bf47412e754c76c9da5

    SHA512

    cec469715e838452f6702f7f9ad425202f3d61b6d0326c040e52c26ff78b1c20affbc1b88c1e7fb189027cfa6d3143e8a3bc272292cff19b8d502ce7da2d20aa