Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16/07/2024, 09:44

General

  • Target

    4dc570acd41dc333a02d8675865d5078_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    4dc570acd41dc333a02d8675865d5078

  • SHA1

    8915add1516ade49698b4717935ef335e0bf019e

  • SHA256

    8e80207db7fb63ed2539507f38e64ec0fc00ea7d74e49e28d65c7f228bf43c50

  • SHA512

    ddc19351b5576336e95b36dda860161153636d9663a5cad7bf0a312831da3e656d13ba88a2e05a91e4023297d3b2a75861be7a05274f28dd888358c16b94925f

  • SSDEEP

    1536:pBN0//sytjuKRGXsHLJVDOR40IaxEUKV5WHpOv9xCV1AeDM6WkpGa16d2gNb2:fqjzxSR+dUKlv9xCtDMIwd27

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4dc570acd41dc333a02d8675865d5078_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1512

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    29bf28d4b840ec9fa07cada8d273291b

    SHA1

    b26a889a59ce02ed7414479b90713207c833a624

    SHA256

    45f3c23ff4dcdf7b8fab9bec308085485f2b768cb3ae9377605319976a63b56b

    SHA512

    0931dd5d968e4d8555371021bf8a6556382e4f6d2bb6e2d928bc5bb0038b91880079b8df50561aad9f809b65a4cf271169cbaf0e1a868cdf792ac1567edddfe2