Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 18:24

General

  • Target

    87ea864bca774c48f40a819a38eb38ef_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    87ea864bca774c48f40a819a38eb38ef

  • SHA1

    329f46b43b543ade997d59850d6d125efa66edcc

  • SHA256

    3f6cf9c9be6e1590429054bd15de96907062da1ed7f8d4d52cdfbfca6d4134ad

  • SHA512

    84e761f62964d29d3181bd5a7ea5aa1965d7a6ad7b1fa97eba6878adab2e0ba51995c1ec56248f6b8445da6900260142f05e911394342265fe6ef1f0b087ee3a

  • SSDEEP

    1536:WGxdRNNh7t/9p0vv8lI/is4wlG4mZTe0FQ+snC9HlLpx+wXFZmGWSYDZ:WG5NNH/EH8lt/wI/VzFumFlguysYDZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\87ea864bca774c48f40a819a38eb38ef_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    37c32677e7a83ca91be6dcc917ea4ed7

    SHA1

    dde4bf385bde6208bb8aa2c77016f4230f235322

    SHA256

    23e848c0565ccb2c9ad9e988f1245c3db0b15b91b0353059ce2547a5f95247d7

    SHA512

    717ef3a52a223557c3f92c66a48add2a2acaafcd0a05bac5c29aca29e1eaee3c1d4ce523d30a9b869a843e7bff84838535a787aa471c3d3250bdcd5dfd60c9fe