Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

ccc3b9cd28...18.pdf

windows7-x64

1

ccc3b9cd28...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/04/2024, 06:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ccc3b9cd28ca0eac95d9a154d53d1103_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    ccc3b9cd28ca0eac95d9a154d53d1103

  • SHA1

    b0e36181eeb403b09dbef812fdb95e4ccda9a004

  • SHA256

    9d311f7f26bc0626ee9ed98a1d457c040cb2f634d2763655059d4f62eb6194eb

  • SHA512

    642294e464a24da33163070d3ca191dc21f80ccdb7d00a905d8ff6706e8352a7e14e2f5cabe1fb04e9b135157473f025be392a384d456d3322d157f56aeb4765

  • SSDEEP

    1536:IwEnpTSzDGmwV7Q2WjS8d+M5L801WcWoi2p7b2Jd61MBxKZWbpONASSz:xzDzQ5mYsWc5bW61MHKbNm

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ccc3b9cd28ca0eac95d9a154d53d1103_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    32b55b327a71c7537e36b5f240a1ae8f

    SHA1

    184011a9829e7866fd82f2b6336298537c644276

    SHA256

    75a49a1eaba201c70a74c1879a4517cbe56564d17776b5eff17a628085ce6595

    SHA512

    6ec1abe87d9784d4462c89045d2bfc792b5ab3cab8b409c13aead00d5594f47ca8e6c48e1d62b4b230c3ae7c3c44faf557d858df4e16f7d673c3955262028ee0

    Download Submit