Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 07:25

General

  • Target

    5f8f318022aa84410693edd7247b2c18_JaffaCakes118.pdf

  • Size

    92KB

  • MD5

    5f8f318022aa84410693edd7247b2c18

  • SHA1

    68b29217ab02d11fd1d3823653f22d78be29a931

  • SHA256

    581ff7233ac860821fca870c532e5c2917f6574665e75c8cf058fa1ae22bffb9

  • SHA512

    790c9e8cb1ae4d87d9bda1f5aeff3a209dece8227d559b874c8c82e36fbf8562712828df345f6ba9effe0a6fc5f1690e566b230f704449cad3f1a4e0191723f1

  • SSDEEP

    1536:bRt0JrR8iZi0HLG7XCcU6oousu4y1Ac1mTJB5GG8HmWQpOC9jwyWLZny1aY:diQibqXCl6oou3D1IcHZC9EZoT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f8f318022aa84410693edd7247b2c18_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f1c01ac28b981347f767fad18ae93faf

    SHA1

    86bff500c9f2b0ddef58550af8ed418bbc9833b8

    SHA256

    94ed414d3e209c71aea50a44d0a63ee8ae093a4fad435532ef8e7504a4ced7d8

    SHA512

    18118b3ddcd7e6898f33e47e08f9417b0c046eb845fe003cc041f62eba21a9c8356947db4cbe9c8ed91d648e042921ffe0c71c825ea88060013181435141133e