Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 09:11

General

  • Target

    2fc583f1c0d9b51fffb52964bc8c39b5_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    2fc583f1c0d9b51fffb52964bc8c39b5

  • SHA1

    037a7ec50e0813b77af9e3611387225a337f5c1a

  • SHA256

    6cded58d0aa4963d62916f6ac2b5794b6a034e3bc041265a7114e3ddee1aaac6

  • SHA512

    41946cf5cbdbeb9a6969eba7549217cd2cf024161b8769094076cf020d4a2d30aa985356580525e02df5eb48b75c60466b43982085310b048dd877a642757a58

  • SSDEEP

    1536:+3Hf8ZGD1VZdl4YadnE9TUE5mKDX7BvrzSMJ4Ea4Dt27P/A0z3JiEyW8pOGFxfLC:KpBl4HnwmQ9vhJ4Ea4ZgP40zkEpGFhLC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2fc583f1c0d9b51fffb52964bc8c39b5_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5932567d6f141f941d047a00ebf8da9d

    SHA1

    d3e69a8a348c5c51c17aaf1198b6986a15784070

    SHA256

    2587ea034c18fe8408ac75df3f721ab4975eec0b35755246a9ce4f335d5e3667

    SHA512

    e9a5b08a43cbd94f692a5d9e9b98cea4ad6fdc7be53e3a02ac5bd7a74cd39cd5b7e93d9d48623084b19418694466fecd48290c10b50c2b1fd9b70b80124a730b