Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 01:02

General

  • Target

    ac55f960ba0cd9e8955e260f17ebc058_JaffaCakes118.pdf

  • Size

    58KB

  • MD5

    ac55f960ba0cd9e8955e260f17ebc058

  • SHA1

    9308c569548acb11751ac8798899bc33ad480678

  • SHA256

    078e3a7cab82fbd5368d04ce2d311540a68ff2bbd6889eb9deadf78407a3ca12

  • SHA512

    44a68851362c98ae05af8e28fb8935c5b7880c482b3ef8ef3edb08eed4391bf95621f85f0d0211d80ef8cb23eb43b1d7e4321bdc44c0ac503d4e447e3924bcc9

  • SSDEEP

    1536:l53kz8IuPovGQAsPxqCbSo4lpLnxHwerVVcIAwRcDyHQvcY2n6BcVXFZmGWSHK:l53kAIQKUsPx7bUDB3pK186kuthBcFyH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ac55f960ba0cd9e8955e260f17ebc058_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8d2321101e8686b1b2739d11274abd96

    SHA1

    3c143877da2b62bf5f2b00b02db63fcfe9c09925

    SHA256

    7916b1bb204b3df6c39b18b3ca45bac4f3341d41b0144d768dacdcfd64898592

    SHA512

    b8f775c54f065caa30fc1a4d0afb95d2b8ce9f64951eb5369b97191fa91d0e0c16ca5bdd262957138de3401ea29db0512eefa9e799a53773cbbf68a4d85f3b20