Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 20:17

General

  • Target

    96202acb5306fbcbbbe289d9a7265e47_JaffaCakes118.pdf

  • Size

    40KB

  • MD5

    96202acb5306fbcbbbe289d9a7265e47

  • SHA1

    bceb5e8863cc5e7007ea75f246d20592569a380f

  • SHA256

    010f773a4fd61ece9b75e1dafc53ee43f6eb1ce0a2b1ad239dc241d69ebb6948

  • SHA512

    7ad044ee3923861b314e1fc78ea3465e4e27bcf10f002bbf08e9a43e5b185ee946d1f58ade1ca38cbe66483593a80e26eff615cd59d1df3d9b01fd4304d2894d

  • SSDEEP

    768:8XuMZmwgCLWartE5Hpxpj6scByVXxHElpuod31eCWo3DNN2r6NDg+Jn58Wp7oNjY:8XFZmGWSOjpj6scEVXxHElpuod31rWoL

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\96202acb5306fbcbbbe289d9a7265e47_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2372

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f6435b147eba3d28f7cb1ca1c3f995a4

    SHA1

    b98a479f57a18265f44fd726577d29b35c4393a3

    SHA256

    24e3b2bd3c17ee1a491f0f26a93b80396590c635f6d053ef4b6a08d99139d5ae

    SHA512

    e799ac87c5cbc7135e8a4268580c4ffb4de0905bf83263338b53b41a5db5a0f9f2659f9e14d7dd053203c793d0d5648dd1059308a0dbd0646f8bee8aeecd5c0c