Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1f7ff74923...18.pdf

windows7-x64

1

1f7ff74923...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 10:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1f7ff7492317984cf254d166d85463f1_JaffaCakes118.pdf

  • Size

    69KB

  • MD5

    1f7ff7492317984cf254d166d85463f1

  • SHA1

    805f1f5b059fe2c83ec77e357847141bba73d258

  • SHA256

    c639f05ad7e0af4f4d50e0a7d726fbd94cd1a3c5ecf014a757e8e3ca87ebb18b

  • SHA512

    5a1593630c420a6f1dfd53ea8a2db1aa3636b9bbfb99c42bc212fb07afb07f7817bd8728a9f674a930c71cebb2d40dd14ee0d2034613d27431b9fe77f0ce5df0

  • SSDEEP

    1536:PtjeEWKIqHQKwGVPnkR8a4xjuWGpOKCWbf8oNRZ2lc:1C1JKnkR8a4xj3KVf8oNvl

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f7ff7492317984cf254d166d85463f1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2068

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    42a5a4023c39043b60db84e95d4a17f2

    SHA1

    634b2f47daf173e5e73041729652509b2de5173b

    SHA256

    4a7dc3a145a8d33b56be07efe2b07fe01618f94c391954c8316dfde4b2760f59

    SHA512

    58ad7e65e335b0704045c4e8f5bf6b84cb618699aa4ea9094ddd4fe09d38ba2e19f7668ab0e3cbf8c1898da4b9b0dad59c200106b67ce0592e9403eb035aebbe

    Download Submit