Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0c28930425...18.pdf

windows7-x64

1

0c28930425...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/03/2024, 17:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0c289304257b98a984e3ca3d65db704d_JaffaCakes118.pdf

  • Size

    81KB

  • MD5

    0c289304257b98a984e3ca3d65db704d

  • SHA1

    59f1c6eb03bfe7b7a524d1cc96697de42f0cd78f

  • SHA256

    9d5ec91d5bc474beab63e57ac002832729203534ed4cb77b0486c11d8f8eeb1b

  • SHA512

    801098b46a4c21dbb39fa620b7f36c0e2b78e777a121ff01284bc6063d2253a49ce1adec1d5eaccc588e9173e19431dab507d0e6fc0894306bed45e6b604a9bb

  • SSDEEP

    1536:7k+IXiWqLa+DFu7YSb3SY++3R003l9oJSGLBRROPazWA2wOtlzZxz4kcWwpOS2RB:GXALaow7YcvRV3rPaf5OHZJh7Sk

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0c289304257b98a984e3ca3d65db704d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2bc9e3f248251765a4f1eee211c3c12d

    SHA1

    3d394f5bc3c690b055bd9502895a6f279c36ced5

    SHA256

    4f5403cc6090f2290c5e7c56b292aab3aa89976f298b7dc257e0c64f1c4cba76

    SHA512

    a68576b8853e09a4e474a6c7c22623c3058d18a1c079c04b3986ce1317684983644a850fea79261a1fd9226f1335a7b0bfb8f5ac78c37875f83c2b402467394e

    Download Submit