Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 20:41

General

  • Target

    b51abd9edc162890f7b9f2257b9d01a9_JaffaCakes118.pdf

  • Size

    45KB

  • MD5

    b51abd9edc162890f7b9f2257b9d01a9

  • SHA1

    23ed80ff60f3824f9a0da28343570c295e3ea43f

  • SHA256

    8fc464d695046b3f7f7bd7e69b439e901c2ae91cde356eaad206cfd45d0ef320

  • SHA512

    9689e660a8605541bf31ae3602c8a4f3c8a73b02708ea6894cfd8e0708d08544f5b9ea16581eef722bfec70bb336a1c0e4ddcabd4f5d0db40b18ac8bb90c9cfd

  • SSDEEP

    768:agGzpDcpucC5WiEus4zeiZJHop6GeQSkBniCDYqjURgixhUB904Bx/LLhak54rtK:HGFgpFC5WiHJHXkBvEqjUmixbMx/pf5z

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b51abd9edc162890f7b9f2257b9d01a9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2324

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    630f36b5fab0d2864497dcc2ec5f7224

    SHA1

    9092800841409cba3ba79b3f1bda4d39dfcc0375

    SHA256

    27157172b48066db81308eb8fb7126fc0cce8c56f613b32da20484e4a68383e1

    SHA512

    3137e1d0a48abc6213f73ea7745dad9039e5752392efaf56a24f62bec78dce351df7422e953a43f0520a3a48555428c0724c15adccdca01eb1d230b8c6a00ec6