Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 08:19

General

  • Target

    254100ffe704afada9b3ef933177a709_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    254100ffe704afada9b3ef933177a709

  • SHA1

    06f3e4a8d3b7588673be9e68d6221b76ffb1bb6d

  • SHA256

    aa8412e7ac008675a04fcd29f12f72468ea81f3719f8fade06a7ca645b9e2a49

  • SHA512

    5482f7d607bfcf62dcb62a4a67259704d5cf9d267fc374e66f1138f8b4afa5f301ad75b323894ab19745929353c31c8b26a45c5ac2d876421186a5c3cb5df3db

  • SSDEEP

    1536:Y86GiazHfwk4BEqjE7qzX25F6W+AJZWNIDLN6hDJRlDsQAyWQpOCx6HMweu:HzHfCEqjEoX2X6fAJjNOJTsQAVCy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\254100ffe704afada9b3ef933177a709_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    620e20fcabede0191681482f74a535f6

    SHA1

    8875abb21689461888dbc8864f71d280925cb00d

    SHA256

    c35354193ca75232a624b30c1d5bbec1dd373a91df413279f86343062058f7c1

    SHA512

    565c1f2a3ce70f4b2036866c5fee90f7d8ba22ea9ca935604aa96fe27b6a5fda027cb9dfbb5e8393be2f36082d53d1131432a4826c510e6ef1aafecc0ca75eb5