Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 02:18

General

  • Target

    186edcc5a00c5c3be12728fbbeedcaaf_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    186edcc5a00c5c3be12728fbbeedcaaf

  • SHA1

    99f8dd07c5882049c03ad621fe8f3ee1c57f7430

  • SHA256

    64419714b359d0a8c0a5cc05c234224fcb2837a9a3a53ec4d8e66957d349cd5a

  • SHA512

    8dec555c5c4079bac3b713033b3fa2cd9251970f2c41a6a89fba288a2a4916e57851f8de22890fb74ebf4fe0d89787496f9e0df05609c44e9415fc744b7f56bf

  • SSDEEP

    1536:0InYcmCvA3Mq09cxnE8HOWDNdNjp0Int3U1qWApO6830NTd/Y:ZYcmCvAc59cxEANd0Intwh6y

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\186edcc5a00c5c3be12728fbbeedcaaf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1668

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b7637a9dcd73b88bcbb896f8eb7b4f4e

    SHA1

    a65bc4a24e5a194f92a89fcf78b92bbb687cc7f8

    SHA256

    4446d0a7dde016a75eb3b14a1ee0e33a9ca788002b7f20c9b86eae3c8acdb213

    SHA512

    0e4c4a151ef7fdade69301f69339ae795ed4f9ce073fda388d9be7dcf3d18c9a10a34294df5a9d76c2a2cfe651ea322d44177eef3da31663d7ffcbd2994be80b