Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 20:52

General

  • Target

    8850452e5b2e05521377c477b965b443_JaffaCakes118.pdf

  • Size

    15KB

  • MD5

    8850452e5b2e05521377c477b965b443

  • SHA1

    3029770c360b5bb950f88e10066dbeb5b269406f

  • SHA256

    df58c856a191676d63b9d568c61fcc6de37e619791fd49c4d58651d7d235b809

  • SHA512

    03535f3f4cb63bd11d34f48e431d074b687f8f197461fcc41d13c5431cc14999af3fc9fac90c18a01559cf8e8d1be0b4681169c60bc96b3260c2c6037ed462da

  • SSDEEP

    384:Vz4m7htRz1/j2LszaEYJzjpb7z5ki4/7kdc6x2x49R9hpuowPr0QvnIac:Vz7hPz1/2szaEyjpbn5kiGAdc6x249RJ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8850452e5b2e05521377c477b965b443_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1232

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    bef4fde63c11b77f24955a1126bf5f0f

    SHA1

    edf952bac9e958620a4a61b3053256297134798d

    SHA256

    233606880688163909e37093dd83e0a3b6ba81b571d7c91ec914c59ca3d0562d

    SHA512

    015715712da6dec8ea168cf2cf26824392fe7e304f01e2191cb7335e5949a8ed5383fe2b6bd3a37c38b0325581a28533a55e17183091dbccfcb1da7f0abf1628