Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

ebc3014b14...18.pdf

windows7-x64

1

ebc3014b14...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/04/2024, 18:55

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ebc3014b14fa4cce3b3fd97c36fa9062_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    ebc3014b14fa4cce3b3fd97c36fa9062

  • SHA1

    69a0ee334e681a41e7e8b14773cb70a8dea54719

  • SHA256

    ce5686d2621882b9f0cc75ae354c7a58e49f6584ec9ec588da402fc3daf94a2e

  • SHA512

    226bbe91c35c5d67cb8aea0741401a17f909bd503c0aaabaf7e51e905524d8e8489d92c4a4ce31c7ede7c103e475137423e6b23a2660ca4d6fbe0e11fcc7caae

  • SSDEEP

    1536:uYoqSKh+Nqia6Z50UEq9se8VzgKtt6SZZ1lrkuLWQpOCoWmiKBN2W:Dx0qia6ZIBe4z7T3Z+u2COv

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ebc3014b14fa4cce3b3fd97c36fa9062_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    66d6c8e505deedb180c5746054509884

    SHA1

    e44bfb3947b1def7f2271efba496c29f2c7787d8

    SHA256

    ad7f9f4e8d0f2476b8d1de87d709795f333df38a761400c8631bf00bfc6fc9ca

    SHA512

    a3985fe681cbbef9c74d3c0e18b4c03c3963a47077d698b865abfb83529106cf5d6e8718363bd03f82287fa7e0a26a0ea94a9aebb5b0ac01ec5595055ac4fcda

    Download Submit