Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 16:51

General

  • Target

    31334565cebc28c49279fad7bc784b55_JaffaCakes118.pdf

  • Size

    89KB

  • MD5

    31334565cebc28c49279fad7bc784b55

  • SHA1

    98c92040a542ead90dc9b48e28bc616eb41b21a5

  • SHA256

    930790d992cb1fb0b1a73a231152d6485a24a616f749a5dd687bb4be8e7f46ad

  • SHA512

    cc8eefaf72eefdc79719bdefe2d044da01ae47928da00746bb85ad65462ac69cab87ff0c2adecda2e196a6b8fa4d8504ae1eaa50f071fd7cfcdadab96674c8ab

  • SSDEEP

    1536:kiT5N6YmtVUFsOf5t6xhyFpZnHrHcIKbXFgSRD4WQRybwVjgUYpWspO2aKSr:7sYm/UL5sSFznHbcIKLFRDmyMVjgLI2K

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\31334565cebc28c49279fad7bc784b55_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2560

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    c5e22591792366ccffe7135e4e3bafbc

    SHA1

    931b1e1d9897199b09e7270079ff8a1f54b772ba

    SHA256

    0cfd7316b4052d0644b3b46a50d84bd40cdbd8c6a9c277b320b3b065bc880bbd

    SHA512

    7af025aef23a7d6c49b39c8a07c878f46d9dc278603ab0fc32af2b5885f7738886e6cc35ee043a65e578cc593a1e1abb5a0814884649122fcce6094cf8ba95a3