Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 14:39

General

  • Target

    9537396d8ddee3b1b215ada1acbed977_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    9537396d8ddee3b1b215ada1acbed977

  • SHA1

    f90c33e187e4c3de73f896458dacf9e3ca4a3124

  • SHA256

    913deb293b62c9530ae7b66bd55a882c1aa7c4b456fc1f0c1967aa07e7f07f69

  • SHA512

    e02366ca9c2aede07e36339bd89850361db071f88e47a5e85619fad8ffa1b9b5779a4bf1799274addf013225554fbee55d5ea88ed6be34a851c0ba6180d79e11

  • SSDEEP

    768:ggGzpDtHwUlONLYIa3Q+CNm9bhWz8Y2wkKpgfKimyeS0GqND9iNnVmnjxHM+:tGFRrXTjhwkEDSVqNDCVmjxHM+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9537396d8ddee3b1b215ada1acbed977_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:832

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    cb186b75e70a85e2f783ac59f20e5f88

    SHA1

    14a333a1d102717ba5b6dfbda4c9eb63c92434f6

    SHA256

    4d7e0424c3bababb04a280ad373909b53c3b53ad1659ea4321beb8f9e034e87d

    SHA512

    ff1a6ff2de8d0c3552adf6b1e834862fd79f4229439b861c5c9c8977dac160560ec798b12564ff61eeee886f49764b5b1646762d76132209960530285d20afad