Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

defbb466da...18.pdf

windows7-x64

1

defbb466da...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 07:33

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    defbb466da3248e5d45dffd139b06af7_JaffaCakes118.pdf

  • Size

    84KB

  • MD5

    defbb466da3248e5d45dffd139b06af7

  • SHA1

    0074cb949c531fdfb0079a3636bad2bc47e6c878

  • SHA256

    e9297f5f66a9f55da9b8ba74450d2607d69792d6025ecaf3cb85021e4fe53694

  • SHA512

    95235227808e2d6983db71a22a285e217c1e01ba2795677cc573db5fb7aa06edd58bf6fce78509611dc75cee15d6641b2f89bcdd4d6ad9bd7c2b6ab02eaba685

  • SSDEEP

    1536:dYBk9k7R0AWF6NYKniSb3I/Ohrhd0huHYI6QZB9rUWCpOViIWC46/L/eL29lq3Qy:uge0AWFMYiDzChIPnVi4yS9lq3Qy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\defbb466da3248e5d45dffd139b06af7_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1f1aaea09dcf23a33e4765d192cdd4f8

    SHA1

    4ca9ba3eb6cab18f2aa90d20ab485880a9a73951

    SHA256

    b7afeea2c44b57b09b618979b5967156da49c711656f1cae552d209e69db13b9

    SHA512

    33553093582dda111843e3887957875a136133383340cb5d9731bb8a306a8d3ed7da529a600c9dccc32c9254119adc1bdca2ede8f579901f685f76988f39e12f

    Download Submit