Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f547950965...18.pdf

windows7-x64

1

f547950965...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 07:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f547950965dc74d57cd037c83a16534b_JaffaCakes118.pdf

  • Size

    91KB

  • MD5

    f547950965dc74d57cd037c83a16534b

  • SHA1

    771d645a5162d6584b43c2a18233c6ab24b7d9a8

  • SHA256

    24d44f92570ea2445c61600acbd88c5d78e26556822e9b2aaa1c42960890cc4a

  • SHA512

    709edc30acaa0a2b75aea1e8c28a5a2652bbe3d5eedb94aacda5e722f2398f6e93c9b26050b10cd60cf69b5bc84fa9f52f0e7e6c0978ca63db6b8a48b39d7d07

  • SSDEEP

    1536:3AwUetoZQMazdNKYaU6WUI7XGQQ2BEvHiEb3lpGO5WCpOViuOB8WOT6TajWQYZxh:1KZ2zrDfF7XbQ2BEf53lpGnViuOBQ6G2

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f547950965dc74d57cd037c83a16534b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2548

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a00bdb03eeab6559d015c93fe7649960

    SHA1

    e9d1dae8657365923286cb02ec4fc34b318b9d79

    SHA256

    befbad096643342635c1023ae6d992451dd26a28b1dbce3a889ad36403587081

    SHA512

    484cdd7e64c15da330ec1e138611842ceb67219b2ac63848c3e356215d536a9d6302a098cbf6a8961d48008b70d9ffa97ba458e7584353ff89fca12556d3b29f

    Download Submit