Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 12:28

General

  • Target

    6798e0ec89c1942045d11fe70c09f688_JaffaCakes118.pdf

  • Size

    80KB

  • MD5

    6798e0ec89c1942045d11fe70c09f688

  • SHA1

    bd0874d16f1085f60ef000f11b933d8e7f3a9583

  • SHA256

    3d0709cb7b8b940b05d97fc40c87a007c0b5a1402cfaff79596aafb9abcedf39

  • SHA512

    b66a0f9e973862ea4f25e3738486ee6a51d407b2707888eb12de17eccf18537d8d4caf4d3e06026fb06a87e3b7f24435ae4a03a36b42df0eb9936df3de5568ef

  • SSDEEP

    1536:eDbsM6TJ6LuxKK4twrRp+Qi3Vy57k8W3qF1RLLouaU5dcWspOR8dTh:04eLuxD+Qi3VyYSPLUuz5d3R8j

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6798e0ec89c1942045d11fe70c09f688_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2388

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0afacad465e9d6fcb2c10e649a5c7690

    SHA1

    e1f6cf91f81f9cf370e21bc76b3efabad7e1708e

    SHA256

    f7af87539e434319ebdcceedde9ccc5845e5441511750b694aebd8fb58ac6790

    SHA512

    51a783b60d23354e745d1287d82eeae55237559fb6cc6cf1b5d4be636946ccc963aaa40c12bfecff9adedb6a9750ef85989cbdc8c039e2837aa91494f77801b6