Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 23:43

General

  • Target

    474b45b3d93764847c4a902237aa9418_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    474b45b3d93764847c4a902237aa9418

  • SHA1

    558bfa01e4d66ee8a47119c482bbbc9bb553f121

  • SHA256

    1f3905e7e111fec8fa1bec63f06e908e295a5d423737a3c133790b71066fbad7

  • SHA512

    19ca049bc04054e56d5cb277bd3f6a42c3066fa36327295c886bc973a5add5abb69d19e8727be07014e48e461c9788593b31ce9016ca91fa47aae9eb5b6f57a9

  • SSDEEP

    1536:Vew6KG86zEGcvzz5xZWGpOKqrEojWW7vxM0PoKhwL7sD5rnziJ:Ea/6wGUzz58KoEojO9L4Vnzo

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\474b45b3d93764847c4a902237aa9418_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b241596cc32c4da46b308d4537e8f615

    SHA1

    dd5d16e577ec425fd5c60e17adbff80f43a2ce22

    SHA256

    58687ff0bf63800f3b86e3527893904993f20b05436a4275004a6912c836fa61

    SHA512

    5e6d8fb069f1be15eb6f96c90bfeefcc9500c498d77fddb5cb868fd4355a6640c2533e25fafb9252472fb9d13b8fa0d22a5b77b84e3f16733c2ae8bab6c4c675