Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    96s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    05/07/2024, 13:01

General

  • Target

    26ee1dab5f33e7b6f617651e265a1760_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    26ee1dab5f33e7b6f617651e265a1760

  • SHA1

    b91d2ad23dda5ed8b25f2623eba7280577dd718a

  • SHA256

    29a9a3ae7ad75123f71bbe9127de2fe59da5f720983e9c8f955ed8054d8331b2

  • SHA512

    fa4a2d33accfaaf299e76853ec1b49b3da2001e30d2d547429dee9d36112555355823e0bd63329b6126fde0c322a7f7d9e617642c955b2daa9cd8f4d301a4627

  • SSDEEP

    1536:h3kufGMpXpcCZMQKrN4KwiQmUgrYzJ2T+b9CD8DWN+0so5nZYRDWLRC9TeLN0FEj:6u+ipk54iQNgrw2CRCD8DaZnmReo5eiA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\26ee1dab5f33e7b6f617651e265a1760_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1944

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    623332bd32b956c0cdc6e6792040285d

    SHA1

    21f512b15af538bce63a692cc8e5d3f45b61a7ad

    SHA256

    507f5d046fb50ce528b462e61b9de61413a3928e0054707e5fdd200ffcd0561a

    SHA512

    4d1bcd1b13e07e78d8d2544cc7d789c4d8568aa34899756151cc6475946ed4500c076f8f050153b0673f4fa472619a72323c4cc14c92e72a2cd8b68bb25fe065