Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f47d945599...18.pdf

windows7-x64

1

f47d945599...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/04/2024, 22:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f47d9455990aa6f18de46dcfacfd8dc4_JaffaCakes118.pdf

  • Size

    78KB

  • MD5

    f47d9455990aa6f18de46dcfacfd8dc4

  • SHA1

    0299ac0017a8fe8f3f1556b39041df135bb13586

  • SHA256

    a458cc3803daa2466c92200055199ef6bea9bc823f9ec85fb36a2fdae4f56cae

  • SHA512

    e9e01b4570087609ab99f4421a98e81f1b1a8bfcebce718407c5648e4512a421b37fc6b370092f1b0bdc649e8585da48022fd4658f94b7d5b807d04958cadcf6

  • SSDEEP

    1536:Xs0evs9HtZcFaws7FzGkZUHZSbsaWkNpOPQBkWXWr7FGc8+tNxsmh:Cvs4a9pzrOZjfPQBkWcGP+tz

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f47d9455990aa6f18de46dcfacfd8dc4_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1032

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    803b91056fca1bea8f489167254bf5ad

    SHA1

    cb7039c343b5a942e4820fac4958a12d3cb0bc0c

    SHA256

    5e6ee5fa4a0cceafc6a7f6ec11273ab7e8a5737e5a8d768ef49faf8e6963d02a

    SHA512

    f6c2e8f4331fd58ade3a365aab417a01c883bc7af977889a60dc1e79e6422c0eed6a38333407ea91fa4df3e9d3586e20c8e432c3d908f86b699d99b56fa1a9d6

    Download Submit