Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 23:31

General

  • Target

    b0adf66fcfcd7102d961a319b60095ca_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    b0adf66fcfcd7102d961a319b60095ca

  • SHA1

    ae2102423f710402a7859eed2b5dbf86d3835ded

  • SHA256

    9339f29ca7c72ac4cd60cb27bfec568b25ddcd4c67c9330e8648be2973c04e73

  • SHA512

    61f704ba8baac64d2cb87b8884fd604091083e14415176a6994b59e8a61433d206d95745bd400300894ac8deba442f360d607fcadeabb005ec9fde51be0b9f9f

  • SSDEEP

    768:agGzpDvpk/dj0w1ZJ0OJs9pV54whs//21QkmCZMUSoU09oxcTsjh:HGFjpkp1ZJVwhsX2TmCqBoUfxcTsjh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b0adf66fcfcd7102d961a319b60095ca_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9186e0782e22f74dac982511cd0363df

    SHA1

    9060107c286b6cc5348159259e65f26960be63d3

    SHA256

    6bb25904b152c66ae234ffd6ab83a16a77e4e66e3cabb606145778f187d61d1c

    SHA512

    f95a73028ece703704fd4860c3b451ca5818df1cf0873d4019b955da7cc03edf2841c9e73ac652401134a6ee38d1f6dfa708b7ed1c963715cf247eae2e9c2012