Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

fbf1ad3247...18.pdf

windows7-x64

1

fbf1ad3247...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/04/2024, 04:38

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fbf1ad3247408247c4d3349e66ac3fc9_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    fbf1ad3247408247c4d3349e66ac3fc9

  • SHA1

    e8da4c986a7f7d4a4a0c8ccde8b01f6c791065ef

  • SHA256

    5a71098501dee7380d5a2b3e65f89d257298b585433ef1fae07a522f73aa2adb

  • SHA512

    f49f20ce21f985fbef847da9d052fed153fcf2924d9678e6622910286cd5723e47e446014f2bd185fbc5ec5beb9a633bc6ae6216958cc30e011d1d13c2ffbc01

  • SSDEEP

    1536:TJ6WvYZ02ES8qSCgcr+7ui7O5NI+nG1Iu4aFNGp6AqNzcYyk2L0t:fK2S8tZM+C+87GDup8YYykH

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fbf1ad3247408247c4d3349e66ac3fc9_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2268

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    0ad512ebc722a4e9949ffd15de096590

    SHA1

    b0a3cd7a511343f8b8c64000b2db2f267a3e4d47

    SHA256

    4fa6c8388a456326f3333f6ae1e50ef924a28824590e2d68be6feea112a40b2d

    SHA512

    4b2de45e5a75d6b8dd8917ab94e4a4c67f34768dba232e98379fbbe8cc15a69d40fe5dcfb2b387943fc3a4fed2c5323b53a7fb0b20c97a6294419077520f8f7d

    Download Submit