Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    91s
  • max time network
    18s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22/07/2024, 14:04

General

  • Target

    63762c5070276bd844b04f3d85e5e966_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    63762c5070276bd844b04f3d85e5e966

  • SHA1

    3f3fe84009fdc876b070be033234789047a3ec4d

  • SHA256

    2145ce5f4205c393a6b0bcb2f77179e5a73cf7b1129eb6e809e67726e942bf83

  • SHA512

    c304549024f71c2937cd39433faf6ec978463367af00c0204cb23b651c411cc3f52a7289b763df2d0ef3027bdc4ec2250095408a7c8f5857db3b9efc340795b7

  • SSDEEP

    1536:ufG2WBSBQSRK+Kr7TOKyzBqOQ7MDg1JOEUN5Lu6nMzXWapOnjTNSVAHW8QiaW5lo:LBSBlRhC7T6gME1JCNU6kgnoAuiLH/Gn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\63762c5070276bd844b04f3d85e5e966_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2b132a8fb32cdcc80ba5307c218d674a

    SHA1

    ca44d23d8234b2ca18192f1534c7977a77e6bd82

    SHA256

    b087851c8585418df52a31ead6a63ba0a34475b1d7b935a89bd6a945f94d9aa5

    SHA512

    235d1558ce24355818b57dd266cb17d181c5e09f9c73d287b7342058da929074c60183a6200d5517269e694afbdc8c65fae1a8d9f5dcccd7f8fe9da297c6f2bc