Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 04:41

General

  • Target

    403daad033406028e71c4a61ee07d406_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    403daad033406028e71c4a61ee07d406

  • SHA1

    27712667cf69e5dd181385d2e37b3a95dc04df4c

  • SHA256

    e5c63e42441bcbdd4031442554fc7272f6d595ea39676c0fda4a19444988b11c

  • SHA512

    631a4befdcc815412c10cd928eff519b6b528c82c2df1334c3a3b9a0318f2729f11c7af57c2a0691491faf88c693d22f90e8d4c278bd66422670de491db1ec1f

  • SSDEEP

    1536:zSH/Y31EE8hE5kVN7zgn5PH+NhctfHpVwDRPjqIwCZiaDK+7QQ:+HA31E7hEkN3gBeNhcNzwDR+RC4aDdX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\403daad033406028e71c4a61ee07d406_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2084

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5454155a0d46898b568f3482e4298543

    SHA1

    8d86e741eef708877ba4c5eec8bf3b55d7ee3260

    SHA256

    9f48be52480ed9dd814594d712bed89b2b9ce51e022b11c7a08180358a1daed8

    SHA512

    6adce0679d8301cc57330d9bc850c321af50fa84891a038662ee914efffe9280244df06d430040372e7a531ef7fcda427ffe91f5cb4c9dc9649cd00b83b14e8e