Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/07/2024, 02:18

General

  • Target

    2aa4e46aec12aa79ffdd124f2bf00347_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    2aa4e46aec12aa79ffdd124f2bf00347

  • SHA1

    4bb80e297435932ed924bc46d870f9c1e6bfc944

  • SHA256

    f4398f401e6920ea5fba6ab085d3f9448fcff5f2c2cab75e82c048d6f719b6c8

  • SHA512

    f3671b104fa32bd3d44827d9c0f05c7ec7a7625452073a6d266c731f6a1d6bdb04120ce433dc604323a41641deea51440a1cb41e6389732fe5ec1e77e436afd7

  • SSDEEP

    1536:0IDPHrY4iSHKeYXAEI37/ye2gb7ZbayuVz1q9RuCPWcpOm9WuMhqGM0Qwu:fPDiDjnI37/yedZbaHq98Cemmhxrq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2aa4e46aec12aa79ffdd124f2bf00347_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a916ea9c7bc1ae93986e6ae2cf2d97b2

    SHA1

    eaff873ab6f69f91ab1cb8136cb69cbfe6958c00

    SHA256

    aab392fd60ad5a57c9e8762be6e573618a34041139d72f93c53b0dfda50eec0c

    SHA512

    b58ea650352d33052676e8df33e5d1ecb6d19007a624e1ed1c5f15efad92f05a1b22a36028d714b8169ceaf1e397167a88eadcc90f34fd89b21fe48e87743289