Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 13:33

General

  • Target

    9ad3cb12fbc4d20dcc301430c37b2171_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    9ad3cb12fbc4d20dcc301430c37b2171

  • SHA1

    481a5a7ed9af5d1a3e3eb1507fb9dc4bb84d4b30

  • SHA256

    566158a1bea9a432223a210bda22765e91354b816d4cf813371f6a20220b8d79

  • SHA512

    7825cefddbab1ad455d06ced645b7093267919d1291ae0d3e0fafdf792e575a3127e22a62ac7d9140902dd45d75fe1eca871343a96e0d5584aa122b826453f96

  • SSDEEP

    768:7gGzpDAe/IEIBmmekRJZsqyxFg+3DrNMnFknVaZoZkCBKkWwDLyGluSzBI:EGFceVK+XUWn2INgVwDLyGluSzBI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9ad3cb12fbc4d20dcc301430c37b2171_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6968812213422df412df5859f7b8abb2

    SHA1

    79715834d4ef4fcb91df7b0173fa0461e5aefcea

    SHA256

    25da1d4f33aa2d77744d773426ccea18e567855d796403e899f3092b8cd9aad0

    SHA512

    d1d3e8940cd9cdd5999aa56662e8b650210bdf444c2b014ea58f3cf313dd0e435c16eb8e61755095a8b5d6c1aa0c137c420a116955c56c580b94de14cd07d4fc