Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

edaac2d95c...18.pdf

windows7-x64

1

edaac2d95c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 14:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    edaac2d95c87dd1cab074db9b3bbe5b0_JaffaCakes118.pdf

  • Size

    79KB

  • MD5

    edaac2d95c87dd1cab074db9b3bbe5b0

  • SHA1

    25ac7e56188fdc08baf7d3dac6ef881baec5cc9e

  • SHA256

    4b357483be14a4746a97b8a3986a0e438a540185d843b61ebd2a117fd9ba0869

  • SHA512

    71e72e3f63904324c04cbfae57369ae6dac09f8562d764335c31d3ca06bc01495c38479ac685959a3e249b2c17b090e1d08fc8041fb486ed70e7e179838f84f8

  • SSDEEP

    1536:RGlSFDi/oSr/8s3I8HzTimzFQpbxzwIhYad+Rsk/IoTJiH:asE/8snHCmzAVUIhYAgsKY

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\edaac2d95c87dd1cab074db9b3bbe5b0_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bf7253d92ad2df12b1cd67a9cd8ce4fe

    SHA1

    0c440b629d8679fe98106f67e5ec752c1911d489

    SHA256

    4653ae68905f3f1f61cdc777977c924b7f9ce7b07eed40b2235b986ae8e95bb1

    SHA512

    d3e141d716d30434f08b0057e197067f725cab67e8d44d5ca9c11c62bb65a6e0b9f89a254190727f634a5aa1c9433963d159d8557fcc64fb75f35531451f0aa2

    Download Submit