Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 11:48

General

  • Target

    1b2db941392168a530f357e27c2e7728_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    1b2db941392168a530f357e27c2e7728

  • SHA1

    bbbafee8398d9a4665371cf01ea9b6e3d378aa17

  • SHA256

    c833b071ed49083381fe431b93c269e277bf1a6b0507d9c06c4f2f67d9c989ca

  • SHA512

    af79e83a63ef1b963242f0b582a9e8459fa2df1a46cd770c2dc7b06618549e916135d6305690be2172b0c3409a627fb3f263969bebed7c9eed73dabb8d9bb937

  • SSDEEP

    1536:d8AyioWdmhYeHCFYYpaF887Bu9v6Hx/Ea+WCpOViIWc9Ti8OfSqjucRmRa:2AyqmLIHoFhBCvqxtTVit3jXR1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1b2db941392168a530f357e27c2e7728_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2872

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    fbae0bef81755513ac2463b35b515081

    SHA1

    dbe207efd0a796eee0e8d41251a06add50c23d83

    SHA256

    d006682f501112232471191b6a2efdc6ec2294b5f4f86e7b0704b064436c3950

    SHA512

    43c604469417fa41e616207ad21cd6aef788362e036783e5c99a3b8ebfa06e95313b8bafb4a4ff4d261bc205987c7222d36ab15a25e282a33bf440aef091adcf