Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

f846a17e88...18.pdf

windows7-x64

1

f846a17e88...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    18/04/2024, 15:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    f846a17e887260b81437d67109f82048_JaffaCakes118.pdf

  • Size

    90KB

  • MD5

    f846a17e887260b81437d67109f82048

  • SHA1

    11b6c708789d869c21f05acb9a5a9261e707fbb1

  • SHA256

    8795de4a3d0baebca789bc04caa411e4e2f73e559a033fa3e280448df020b379

  • SHA512

    6193d0beb5633d4ca97d9411e9a900c6633d76fa480d9b71fdc7627c725ea514cca899be89e43e5982792554c9378818e5b345f3b049675283e1bffdac3365a5

  • SSDEEP

    1536:rCos1V2nxgoYIguuJT7UMR40eBwRdtCdKxWY0yR6VquWOpOwrdJ01X7:eT22B/JvXdtCsR6VqDwrdOR

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\f846a17e887260b81437d67109f82048_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1688

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    82545a82bb6033ff0870e7f7a665fa3e

    SHA1

    f2ec0c88b0db1e64550c7a31bd1e9f8bb1095165

    SHA256

    96f69a65c37080017a5bed613542f72d8de8c4964a9236a4d97a1885d8b5c7d1

    SHA512

    e1570afb934dce31d68a436ec8a67676efb957b9852a707799eeb2fd7d1c1e21f3ce06dea42130562989e5c323777d94f33301d7989b8f31305c239b0ecec207

    Download Submit