Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1a7994a6b9...18.pdf

windows7-x64

1

1a7994a6b9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 06:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1a7994a6b953d43e2d12dde3605c880e_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    1a7994a6b953d43e2d12dde3605c880e

  • SHA1

    396f0aa418a5b699b15b6ab463c4cc5f198e4f98

  • SHA256

    1b3d9eaf56477255ebdce29268c04cda6ddeddc319078dfb2eed31c94c835048

  • SHA512

    f2bee1a2cf4a814232b152f6539a27d6d29722e1f7e1ff3e27218a1e76e926508098b03cfc8f82e34ebfe7b803c1a8676a5eea9d5f92d3cbccafc9fe4fd38678

  • SSDEEP

    768:89GUimxbo8V+zAJXqKk728P/clQ8RHUMz+54iBEqX/8D+:iFimxboPzcqopqMz+5fBEmUD+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1a7994a6b953d43e2d12dde3605c880e_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    9d9a63d81de9e7b741d4939747a6e709

    SHA1

    3da8149f5a028e1c26e5385c6d39327b7aec57a2

    SHA256

    6944e8ea32384c29f4ace26f1e91c0d9d8f0d68133c807c473d36e1d14ef5c4e

    SHA512

    04d7d8715f5b4e4fa78955e143fa3e6883315f8f8bb441d9728d7a709fdb443ef4b2aba9c5c39af25875b73617e12d6f3610266b5353541f519627ae54ae3ea1

    Download Submit