Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 11:43

General

  • Target

    9e0f655c6104ca92f3a8192f84907662_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    9e0f655c6104ca92f3a8192f84907662

  • SHA1

    8f231a12d07a322f19fc2e450c359c828c3d4f72

  • SHA256

    62097bec305f03e79b6e8e63753fd705c547dca160ec3a1c5dd77d0d12f05a85

  • SHA512

    6965a048f93146d5d725dd978e16b45260ebb06e19b556e2389a512660e4b47bdd3b3815c65e27301b043d54675b3b4b4abbceb40aaa56a066d874d5c4bf7a6e

  • SSDEEP

    768:dgGzpDXpm6TPCtRb+JiepqDYXsenZlI1fiz3+AzHA13HP6d2j/Wa3HNUaTf:eGFzpHJieweoeOAzgtCdu/Wa3HNUaTf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\9e0f655c6104ca92f3a8192f84907662_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2008

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    aaeffebe4d0ef6f77ff776da5580bf4c

    SHA1

    75d385eb1bdcfa721182ac18bfbb81df58811c06

    SHA256

    39f9ac9cdc8dcb5d86e3827dc144ffa47336da3cbd1f104d75dc82c8d86146d8

    SHA512

    9d1c1c8f8355493374980f826c47cc0675f64e23802a347fbc53916fac43bd9f4f81f37d4aa7aa1a313712f5464c2e8200e95caf4e63271183ad606a00efcf92