Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 14:28

General

  • Target

    67f1a44807242872019cc2ed55c5b295_JaffaCakes118.pdf

  • Size

    70KB

  • MD5

    67f1a44807242872019cc2ed55c5b295

  • SHA1

    6c98fb88219483c46f96307ee650fb983b10c199

  • SHA256

    4c1a5bbbfac4ceffa9e7035ccfe9dfeb68d0fc76f386dff01261aa22316bc814

  • SHA512

    e348a9fe17d9bc3284d771e18205adfb4583085e590f934af814d9a1167db81d705bfea3b909fed3c9baa2b5216795cffb671691e445a1e578e5863c781b012d

  • SSDEEP

    1536:VyTqe/WxEeV2YD+uXh1O4pH1AMUYN++Q67YtlN+dZvWRmaXWQpOCItbD:sWxyTuxBbUYNgYg3+bTaCCsP

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67f1a44807242872019cc2ed55c5b295_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    93cd85feb64b7fd6c950cd787eacefc1

    SHA1

    9866792c7f7a6d7f165b2dd821075ff186280351

    SHA256

    b36bb1a4854ae8eca6fda7b109d09439f11a698ad83ada265f0e63343a45f75a

    SHA512

    3db50699cd629e53147def7ac965d56f2357cfed41dd9dc69e802246b8dcd860cfd87615fc7bc7b7b863b78210f6be94fc5f8465bbc99935f99647b2e469f22c