Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 21:11

General

  • Target

    1c839adce96777a7a51b8e84b2f448c3_JaffaCakes118.pdf

  • Size

    16KB

  • MD5

    1c839adce96777a7a51b8e84b2f448c3

  • SHA1

    b143f4e097c94da1c3580167d077315110e9a332

  • SHA256

    a0435d709c49918ea00c85e25022a5916865c52018c2ff7c784ec837a486faeb

  • SHA512

    8237453145490a0ff903bd598622db3486e41ecd95b35bcd1f38f675fcf0fee725648b7abd3649967412d67104685b3d574ffecbd5b420e6a4a2515f9cfac30d

  • SSDEEP

    384:5PV1n1TGeSehE+JmS65SMaMzGzEn2P/eDBuSvuIzzGdGGYG:x1T7XEmX5MS423BSvuIWZ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1c839adce96777a7a51b8e84b2f448c3_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2852

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    65a7a499208e8b2de307beb40a881e89

    SHA1

    4a61497d9d3e833363a3daa413cba8c1c0b688c2

    SHA256

    f6990f89db1dc32f5378385bbff29e0d12a4299d9f835298516defc4cc87e951

    SHA512

    69a3ac713ab9978a7f796266dbdf7601a36b307e391f6bdcda4df22354e6fbff759ef1846538398130dbab04d768b53cd559d1d5c5222a1087cd989d502c346b