Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

fb92f79656...18.pdf

windows7-x64

1

fb92f79656...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 01:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fb92f7965678d93a8136a54ec8026811_JaffaCakes118.pdf

  • Size

    33KB

  • MD5

    fb92f7965678d93a8136a54ec8026811

  • SHA1

    06f26b29620b23965d2ac9a3638e351803a74279

  • SHA256

    3459d698d93177879eef8b9dadfa1c3117e16391f690f23f74ec7e73ec9f0545

  • SHA512

    fe56b95c6ddc378b3234dd2f7a11d6f8c0f434252b236e5c95c58538990482837766b9525580bfcabb5cee490b667a101190774542da84431a9acd013e0820b8

  • SSDEEP

    768:32yGkzsOPS/XkiCxLsHGbKlHnBnHNClBQma/G:myzqsPxLsmOBRHNC7Da/G

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fb92f7965678d93a8136a54ec8026811_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ea55d67cb4e0a3d048a30b41fcf0fbdf

    SHA1

    f9befa0d1d6aeed8c74aeca683eae86b0c4ef36d

    SHA256

    bf325a868dfadf33f2437156cf08e4b3ce2a3924ffe02767e2ff073dfdf5e760

    SHA512

    0241dac7a9e338b0abb8237f1cbcfd4469f1918818ff6bcc1ab2168b67a07ec4ba9d092f27ec6f29addf7e73d0d0095b92a62131484d7422e290f5ab19898d53

    Download Submit