Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 15:12

General

  • Target

    b42aad56d9e56485a74023ec4d84c8fd_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    b42aad56d9e56485a74023ec4d84c8fd

  • SHA1

    a1e4a93163deeab811c34d091a77cb72ce3696cf

  • SHA256

    cd1bee1493ae7323bb60c1abf68e0b934f55fb8a4ebcb51edd9db5747e575f06

  • SHA512

    55b607552d82b6d9267f552c7a615bfe0604d7288078696935d35b948b08f0a74615e6dc57e2244735b0ce17078ece326a04a1173beaad48ca37e34853324c50

  • SSDEEP

    768:QgGzpDTpWvj3TMxaYjlAQht0qDd03eLeHoOQ43GIbSY3ruWMJIhfmmnGW45WxPTu:9GF/pLAQZDdReHoOnb3r5lhfVGW7NT4j

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b42aad56d9e56485a74023ec4d84c8fd_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2216

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ccd6d3f4283c502af8896037278370c7

    SHA1

    24b9cdfb2452fe097db6cf308f214ad2e1301e48

    SHA256

    2f5788bdf3a4aedb8b3628a6f80b71dc719243510eae36291b7fb29534cb021f

    SHA512

    f2444f73990b988ac72eb54a2994e8474088cbe35f7886c330b50dd8941d66f8a0fd410b4b9194bc3dff0809ece8668d125a056270f89b073b43b659f83a6e3f