Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

ea4363e088...18.pdf

windows7-x64

1

ea4363e088...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/04/2024, 15:06

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ea4363e0885e1a5ac80f5d6242616658_JaffaCakes118.pdf

  • Size

    85KB

  • MD5

    ea4363e0885e1a5ac80f5d6242616658

  • SHA1

    db08e025d9c570fad40f116ab0dc165c0dbdd921

  • SHA256

    bf7de77fffdfc3be951881aeca2240db4adf0224b72dd7d6c4f9f02893de47e2

  • SHA512

    2a3a33f9e3b897933181b3b09f005c9fc93b51d5433ff9a39014005f20f451d7d98ebae4aab7aad7d76feba2ddb65cf39fd1e01e33f75f9edd32b7f0892c3248

  • SSDEEP

    1536:9NkmVypNl2js+fECvZ7q/HE1P9L49Hk9ioheGbHSJWkNpOPZ7WmW8m5EZ/7z8ywA:A72js+sCRZ1PZ49HHohYyPZ7W67FweX

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ea4363e0885e1a5ac80f5d6242616658_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2292

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    2136cdbc5107961b6ac2671e2ace5d76

    SHA1

    871ede95be5ebf4981cf349ade1166d8b4e7994d

    SHA256

    9f4eb774dbbb2d963e1df3de1b939568532b2bf829cc6ac9aa4b72ed84016572

    SHA512

    6317b4896122af0161b2e38a30fffd0adee453d417b2a16e6419a86667f3143ff53c69b92e55647f703f7b7dd276336002fa259cb5c33cf1af9e80c623d07f9b

    Download Submit