Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 14:30

General

  • Target

    aa2e7accbc7313b8bd43c96b68962289_JaffaCakes118.pdf

  • Size

    35KB

  • MD5

    aa2e7accbc7313b8bd43c96b68962289

  • SHA1

    c7e22219630783972c61e67c36c94eb7dc1c5c5f

  • SHA256

    19e594c848a302f2b5a77657e12f7af22182d9a368d2ba0726cf9f67f1dda7ea

  • SHA512

    723383b5be649e433a5accf569ea552e797efdd81c0db76d0b6ca908df3b3204e330fc082c408b87928f9fd31aec5bd40d94aa3bfca52245136ee01744508899

  • SSDEEP

    384:r/QON8MUG6Qgw0JZCTzz02YFnarXQl8HXsFgYmQmWJjPRlqeIGQrfTWmZYtCjrl6:rXuMZmwgCLWarHD8jZoeIzdYOY2jtKt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aa2e7accbc7313b8bd43c96b68962289_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8a7bbb0862319dae351281c9326a9537

    SHA1

    c5dfb6ac32e7f243fa9b30978365b9013966315e

    SHA256

    30207adfc97a235e3a7d6ec43c0029b3ae662733a96e957c6dd19ac5847047ed

    SHA512

    843091cebab8c5312ad78b45939049eaecb68f972cc8ad52843b8b4e9458d135a5f8788a358395c57fa2e8042ff43079fc703abbd7943103b4155bf68cbde33d