Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

fe5de03611...18.pdf

windows7-x64

1

fe5de03611...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    21/04/2024, 03:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fe5de036110ab5c9af671005409cfd16_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    fe5de036110ab5c9af671005409cfd16

  • SHA1

    0ef1c3e27e33efadb580dc2ec642177f7c6b644c

  • SHA256

    3bdc8c97423c91282fdc7303308f8176df46fd5c6b8e2ff36848cfd1dbdbe834

  • SHA512

    14c512e9280206581c20d955c72ed64c028d2eab1df03a2a336f074f30348ee162feb8622f0ad5bf8ebc1883f70e84170a38a740813fe4d92743dc28068905c9

  • SSDEEP

    1536:fhraqfUDSu0JbHqu+7dtiJ7IRE8Lc9sYaDsNIsr/L3zDGJLRZilQ:Eqtu4FSS7IEicCYZdTr3GJLRV

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fe5de036110ab5c9af671005409cfd16_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3060

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5738b5d7054b0fee8570b496b9e44e23

    SHA1

    d63f14e4f7a08115bfa41950972a7f623148ea46

    SHA256

    1b8954d5aec7e62b592fca66a2bbf6e3aa97c7653f3733379597f1d912b1d0f2

    SHA512

    a86146a582c3e13310103b4c5d32206ce26b6ecacca7faa967b5105a5cf0ce67b73512b577123afa5ad896efdb3110e1c0da648fa062cc9dbe314c433eff83e7

    Download Submit