Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 10:55

General

  • Target

    301753c386e6be2875a0819db6739007_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    301753c386e6be2875a0819db6739007

  • SHA1

    4343cd956af6ee549a45f1cdf67bf194090ca1ff

  • SHA256

    a56e8f41777eaf7aa8e7887b9d285936c3b3950d09c3e1b7c195cb030b7462a2

  • SHA512

    7f5a57d23c9f31f2785e0a87a32c8ab7d7ccd390b6eae21e213245ef12f55c8377a45009ea9fd41f80953bca15061aaf4f73cc27ed1afb2d80d4c92ab72abe80

  • SSDEEP

    1536:piW1P/q+kf9Lvoyf0qpSR8bTwjqQWrUFk4WapOtQHWI+QdOc0BlImc0xG2V3wRj+:U8YL5HpSObTw2QWYkhtQcorYxVwRS

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\301753c386e6be2875a0819db6739007_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2368

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    94a0cabd1fcad809960930e1d0350e41

    SHA1

    d31f9c114ada16a837d58ba22377e479a55e9876

    SHA256

    994c2c4c56c4603410d28c1c7226f2df9ec06f03ac6be56833c8896c814a4a15

    SHA512

    53ac88fdbd21bd1f9b112486bc8daa919f983edc5dcffd9a945f5f5cd2e8c760e3249d879f3d1ce306f2bc2b83e08c8746ed474687a90c778664837c152e868d