Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 04:49

General

  • Target

    8966e50f303dd6628dd3081c40450ae7_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    8966e50f303dd6628dd3081c40450ae7

  • SHA1

    f91163eb97e9f3fd9d4f6e12c918aaa2393c1b7e

  • SHA256

    3975ebf2261dc906bd0ccc6389cd0879949f7298594f332ba2a550794f4070a4

  • SHA512

    4b8210a77392d5940d21a10cef100f5ab2578c04a0b038461ae9cbaadee3d80e97f66f9f7c922abc0a1f7ab0f3903c029c23404c2e5b309a88e3877510b35ef0

  • SSDEEP

    768:tYYZz8ZDBVEtGlR7TFdX7m3vIiigb/uWYn1XIXuMZmwgCLWar2O:eA86tGlR7TFdX7m3vIiigb/uPlIXFZm2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8966e50f303dd6628dd3081c40450ae7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f782aa690db28f08ca430c3a84ff48cf

    SHA1

    59307d94b1ce704cd0cb76d332c01c634ba7fe4d

    SHA256

    e3e3c44d20ed2c4d0871f38109778f932859cddc733f9f49d29314f2b90a84af

    SHA512

    b478f98b934f94ab593fc7e94debebcbb167ea908b5e06e9e374a27ea7f0dd31f860656b3f804902ab66058d328af56622158a44a7642f3fb6695191c276e204