Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 01:40

General

  • Target

    9024a21ccf1b7609e56e11a3aedd2469_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    9024a21ccf1b7609e56e11a3aedd2469

  • SHA1

    24e62ddd71f021d1255756718ae42a01abefba28

  • SHA256

    b0bbdce03ab7c7631cdf59e7301dbc6fcdaa63cd6c3669196c8347b1d987bfdc

  • SHA512

    34c8a592ea585834826060fbcc0a067374b1fd173dc7ff94b97729df69147b5b0bc5775d1f8ed8da05bacbe9bd4336eed39021fa49f052219ff668ede849d4be

  • SSDEEP

    768:rgGzpDaIFMJ3N6ERv7ZZOyuu1RXZUoWSV7TQVM4xMWy/k30a8XU6qYjr:UGFWIcP3vhTQzxC830XXUDYjr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9024a21ccf1b7609e56e11a3aedd2469_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2936

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b01ec7cec4d5650af6417732347992f5

    SHA1

    827d8558b3e94eb14c10e8c256d930508e3a7aa3

    SHA256

    0c9b48bee9ad85972a33b4aa2a48de993dd7b1dbddc9b2a55f1455641d137985

    SHA512

    ad42ac0e3b825ab33ed7591ae2adeb837585a0c905352434ffe473c979365f2d229564bafc3a1ecaad20de2d56b7b81549fd486a021e1be717095fe030c2ca4f