Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/06/2024, 19:31

General

  • Target

    1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf

  • Size

    74KB

  • MD5

    1740b78fefb02c033ae0fda052001116

  • SHA1

    d9620c18c0baa40a8655f4ca374c45f85d71f932

  • SHA256

    36692665fa81197a7121821e8df96194b3dc4b4d251429c70169b536fe37c53e

  • SHA512

    2d3830f19f3172514d6e0641bf33b458b6e77e02b43f03d71f9dc45651bfe98c9f67abb5f22910a919ef3d288e2e884769700743d1e8393cf69e291573bc8127

  • SSDEEP

    1536:cHBCOUSLIy8C23d2s84pVptaRnYZK5MlWspORGWnMX7uO/ek14128W:FOUqIy87dkStaqZlsRW6Fk14k

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1740b78fefb02c033ae0fda052001116_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1ca3177d53cd1de61f3fd66d2e7bb4aa

    SHA1

    bf37f1a80e11b9bdac01e9d5aef9b9a6778bfbdd

    SHA256

    0ee5f38f7ee11e8482358cf18a7d5f49383b966284088945bd40995ca3b6f3b0

    SHA512

    ef4f719714e01ae7716c1f5dc9050cc3ad766855152a1668188ad283152835c5b7d54b7c98f617c2f352e112d3c5395d3a692b79ec29d6f4fc039b1c3fcec794