Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 09:20

General

  • Target

    8d9760814ef3c35d5ce6d5055c98b17a_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    8d9760814ef3c35d5ce6d5055c98b17a

  • SHA1

    445518f85a54c5e74792072496bbdd63550d8ab1

  • SHA256

    7f8acd42e49c84a23deece8c63f623d173b63bd906bcf025975b91d5712551c1

  • SHA512

    46f4f7c7b9cdabcf078954065415b04b3ea22c55c7380bf759e37aae5c1de3a94162e5b72d958fe1f229c9cf0e800dbc923f502737dd0f8747e8d1387afcf843

  • SSDEEP

    1536:QXFZmGWSdg1PIdZ2RtTY0JhZIoFRN05mnA/VFbv2nWj6d/pgUxRtRpSo:OysdgkeRNOP/zbv2Dd/pgmRtRp3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\8d9760814ef3c35d5ce6d5055c98b17a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    728a42ae6199c28645d9121f5e92c86f

    SHA1

    7b9a1be8b9279ea1506b4228c0d2c2702addc1c2

    SHA256

    e7a415cca8df475c90fcf9a3dc92ccf6cf63e1acbbd4b948efaf891f7be4d026

    SHA512

    506eb03f3f07a18b310eb863c7c9130d25c718e24891764396c5d1cfc8d069da56fd71163c3e82ad4612f39554995977a55e6d190cb23aa0ebbdb4d8d3021dae