Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 04:30

General

  • Target

    b6c294c8127262d1daf8e696fccb4dff_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    b6c294c8127262d1daf8e696fccb4dff

  • SHA1

    c2ae9edf040042728186f738a92c55e6281ae3d7

  • SHA256

    d85dc51d6b6124f411289171c79838527a1fccd00cf39ff020cb8739302baaf1

  • SHA512

    e99ac8f7998dce50fbfdc62ccc76f697cb7415ddf8b4afc6628d7e70a77cabae9e184fd80869d60348b0471c777b47721d0e07420d6cdbf72944272c6e90d55e

  • SSDEEP

    768:gXuMZmwgCLWar6E5Hpx9krlF1PH9oAProbw+4zHKdCLeJspKQEMP5qchA:gXFZmGWSbj9krlFdH9oAProbw+4zsCeZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b6c294c8127262d1daf8e696fccb4dff_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2880

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e05b70e647ae33a2d76ca1ef6f44badb

    SHA1

    958d1610407f0467fd6f2b890cbbdb93efbedb45

    SHA256

    7a16d8fd4fbb415a5bc32f5da66cb7b09ba130e9b974f5cc148f0bb94b1360dc

    SHA512

    599ee7c125cb3378d59dcc75d70a91fb32bfb84fc31fbe3718b051f44352af006470a3b8d82be6134b743aa96654c1cddd4ac91009bcfbd8238947c8f9148449