Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    21/07/2024, 21:48

General

  • Target

    6188095438f6af2e23aec0b9569fa598_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    6188095438f6af2e23aec0b9569fa598

  • SHA1

    9ad0bd773b0e2f4360e49ca9b16681f37eda1069

  • SHA256

    62670ebe3206bdaef5e77e6443383a8b02b2d5e704263001dfabc8f72ca50188

  • SHA512

    0b5bcaabf1869b4d20adab46c4611c58308b1300a46b8f198629c10c146268a6d32f9c1ed5c2e109be3a6635536655eeb12ba7b726658847d73fabeaa7cb6929

  • SSDEEP

    1536:PM2wrSStgj4oS9Om92uYI+EY54bRocooJeQfbhvsjeW8pO73WMRABk3ZVcnPj4pk:PWSog3S9OKdwEYE+cooYQzhvu7VrZq7V

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6188095438f6af2e23aec0b9569fa598_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1952

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1f3a059fb73df6eb630d74707ee47d39

    SHA1

    2f32b5a4907dd83fc0e2cf16bc60f33b925b33a7

    SHA256

    686d8f35aae6bd627898fa2e0feec18233b64450bdb53a0eba185204958a59b7

    SHA512

    0616a41317788c4e9dee5c71ba166bf6817b39d7d4979c609488fe0f569c840138eb10b651d295831d4abf31cf8a77d004d947dda211765e61dfb39eec325c18