Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 10:15

General

  • Target

    3cf7784981a65274bdbeb37e493c6ee0_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    3cf7784981a65274bdbeb37e493c6ee0

  • SHA1

    4fda05f85f5b427bd0a936c4306f46dbea6d40b0

  • SHA256

    fa4b1924196a7df22f1c78bde688890f31ee66fb8a67a9a7fd2fd06f385e8171

  • SHA512

    a62fc62a688eda7863d79ca0e745656bac7d00bc585cbb24ee26c68f19a56f5e664e96ea71f6055b56c6e422367aee243280bea6c8c9e94d2cf5f76fafe17552

  • SSDEEP

    1536:D/52baRdLfa1xg5QGPBSfIFmX6C9ND5xvWcpOm9WhznLHjZQaR:Ib+pfa1xg5QqkgFmq+N5x+mmnLHjZ9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3cf7784981a65274bdbeb37e493c6ee0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b1257ea1cbb7f84f8bf58b77f6f69d35

    SHA1

    1157dca6b77152ea0b57956f6601bc5117cdac03

    SHA256

    23aa4cde0f51a3520171016a15e4fbd95382ab5465b2ab4847440a1184dabc8b

    SHA512

    8c03a5cf9dc64eda5e7ca613b4e85755e9ad94275daa58ca3c7377e9da7f0ba07abb2dddb82465af3e77ea9dbb4aea4dcd626a0aa14cb2717c8ea36eec461ba6