Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    98s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 12:11

General

  • Target

    632ea6d74aa74eb700b79ead7ec6cfea_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    632ea6d74aa74eb700b79ead7ec6cfea

  • SHA1

    7fbd2f086a44dacfe01331d6b650e805eea2f19c

  • SHA256

    226c105eee7011964e3839c5714e361254800191064f6b2d5fb9b4a9b1567fc3

  • SHA512

    861dd5b39462e18489d53ea381e768c4de56e792ee455f5783f2e66481a544205a3f062c9cca121601785d75bbaff5c927da4848520ba1cb8e4bb0a7ec9d8a49

  • SSDEEP

    1536:VMlxBpjwIypJAHx7O8f66on2LNAlb3uq1RWlWNDv3+GIFtl3WQpOC+BR:Cxpu3ce2Lmlb+GRW2P+GI/liC8

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\632ea6d74aa74eb700b79ead7ec6cfea_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    ab08a347cbada90a05cd6fad791885d5

    SHA1

    65bf7dcfd8966c87fba1ba221c56cade87e51510

    SHA256

    2ee6216a05585e9234749e3d27a82c3efe2697c9d206f5bcfbe9798c3e791224

    SHA512

    79067caf8e945642bb6c8c9a49a1725f2eb4bea6f1547e104edf899bdb118817f78eb4830d379a2ec3d5822bfaf0944b45e80f73e743759679ea23ea617d861e