Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 08:49

General

  • Target

    40ff37bab2a07546a7c8978ad569171f_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    40ff37bab2a07546a7c8978ad569171f

  • SHA1

    b9a100885b0b4de0120ef66686af299bac980f91

  • SHA256

    cd33f686b116e05041ac4d1183e7ccde955b8954fcff2742d963f9e7e713ef0e

  • SHA512

    5900b39594eae1ff5d5fb518da74086343c68e3662a73cb44e132bd38caa1b93de19932f8899e900a048c080789146a75732d3c63e19f792e0d8167701529a3a

  • SSDEEP

    1536:n/p+3Sbp4UxiA/E78awvT7b+ks6dipQqy9gb64yS9pJkW6pOu26W6aWib/+RzLgJ:R+3Sbp4UxB/E783vT7LK5y9QhNdu2PWq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40ff37bab2a07546a7c8978ad569171f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2028

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    927a485d4ea227bb03225f968b959d07

    SHA1

    28097eab06416dbb9d250246e88e770bba10d9d1

    SHA256

    536729a3a58c749006f508206f5da9ac0d2db7cc1a74082f20491ab6d7c9cbbe

    SHA512

    a0643650639a94aba151bd536800d75c4c5bc1f4fd7751b95244241e4654eca357ba6345ab388c0ba46e817ef93dfb2b35b8a8c614a44be4a2d741387fd74092