Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 21:34

General

  • Target

    a27c546a31fb48baceff1e3373f9481e_JaffaCakes118.pdf

  • Size

    32KB

  • MD5

    a27c546a31fb48baceff1e3373f9481e

  • SHA1

    861041efa676a72da7ab1fc3a09c1dc278a9a858

  • SHA256

    a73518351db96aefc5860956d722a9eb1a30be5bdfc2e7b6307c6dfd5eb7ffe3

  • SHA512

    5c43db87facf84474f7556e0e382d4a1e7ee95bbdf388d2dd9504fd7d7c7d3f47ad3793bb212b79617d3eccb613faee403c137ff21e880afc5032d68efaf7d98

  • SSDEEP

    768:JXuMZmwgCLWarf0uL4Bx21cCLyLUbK0SmEEuqbe2y:JXFZmGWSFMX22CeLX0SmdRbe2y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a27c546a31fb48baceff1e3373f9481e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    d00dac3a3f49ee173db4f5877473d622

    SHA1

    d7322bcea582fbdf2b94fb166950a0cb309b795b

    SHA256

    399f0a6c3a2ae05cc9b862dca3058e30cb342f1c4f39901a54a65e746563382b

    SHA512

    1a2cd84e50fee13efded7040a62a7ef157c4f80bd20fd86a107d2e7aefd344844b6858419841fce7d890428045f7b32caa5eecd8e353d4d621633af3fa1ae5f8