Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    10/07/2024, 07:36

General

  • Target

    33d132149906f117cc0b94d3ca025077_JaffaCakes118.pdf

  • Size

    17KB

  • MD5

    33d132149906f117cc0b94d3ca025077

  • SHA1

    fa1a8fb6186e442f1e3291a31669b7efc5c1fbef

  • SHA256

    9da3c8677d453ac8a193566a03804ddf956dbdc8b26c687a82cafb617740416e

  • SHA512

    9b0772f3bc8d39dfcaef064f0b0837334a1c54542bd96a6e05e2b0b4f083ab5138fc6542636fc83a28a3d6f0455a306a151f85c6cee85f34c9bad9de981214e3

  • SSDEEP

    384:vPV1XSaV+p82B6JsLTUSIoGHA4QK5e9omprgd+Si5Vm5Cf09JGGYq:jl+ppB6Jg0hkuYcd+xrM7

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\33d132149906f117cc0b94d3ca025077_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2236

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    70af994d700cc57733d6bd8253d51e7e

    SHA1

    3bc4f9658400f163dafd2714bb8809b3bee58376

    SHA256

    f1bf696e5901da2288b554fdc926070fab07a4074f069f2fe5a1f2c994ae80d2

    SHA512

    8f8241a8ac1a571b1cb65ed05f091b596e3cf2c63495f6547bf6faca68b4dc6128e1b8c44308f5d82b2a1b75b05e6864f61793f7a86bca4cc4252bfa5e563b89