Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 17:47

General

  • Target

    afa0781d5962aa1c50babcb3b0c81de0_JaffaCakes118.pdf

  • Size

    50KB

  • MD5

    afa0781d5962aa1c50babcb3b0c81de0

  • SHA1

    3e67c8fc2d3024ef5db473a85d656e73bb448a2b

  • SHA256

    ee63d1bccdb15110570cc130934838da0a0881841dde5f5c127a8cd901e2856b

  • SHA512

    c7244db3442daac0a25dc42f9f1b5ada0fbf357918eaf678f41437dd56b2eaedb4fd3241c41ea326b802e3d7bb40086621d1cbd78e91a632b35c5178b6482b39

  • SSDEEP

    1536:C+0ly53o1B9lKbqQq8h0obl28SnyqqNMD82h3JYXFZmGWSYc:C85cP4uXAVbUn+ew2lJ2ysYc

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\afa0781d5962aa1c50babcb3b0c81de0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2576

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6e639cd4232564a75a9fd4a910dad542

    SHA1

    6147bfcd895cd67ae61a229ed0e01e5c2cf71f42

    SHA256

    465d73d1f04a07ba78baa34325646063867d5f1717526fe5d0c5ad951d6fbf90

    SHA512

    08c45766fbf763f4f0e5b285557623e37005894b22c3c055d38b4e703c61bfba05d632788e77d8c6e883f1fd25a3a056cb21785718e961b831db72ee0605fcb5