Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

03555e9c6f...18.pdf

windows7-x64

1

03555e9c6f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 13:21

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    03555e9c6fb8b9768954b4bc82ec661b_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    03555e9c6fb8b9768954b4bc82ec661b

  • SHA1

    7e016db9f6ce8f1d31f68c96f4f4041df8c893a1

  • SHA256

    0f521d941ff335d017c97c1925190ca76905bbe47132bf1b02502a2f8bf3a7d9

  • SHA512

    3523730a0fda58bf874270903489ca2898f4ce3eeda4a5403fe226c1d3b441c1e0895d18d2b2386df5a9b1441794c2696b2a6dd811e055993ce7dca6556b508e

  • SSDEEP

    1536:ZGFIpkym8CLxicsbrYItWHrRVI7odxO0Gng2gR:sFIpdqr7p2gf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\03555e9c6fb8b9768954b4bc82ec661b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2924

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5051f0c33a395acafcd72941233070ed

    SHA1

    938ca9d3307e65027ad7c1ce1f31f07234d8d397

    SHA256

    4162fe386481e76bd4b2b6eb5660bacdb67aa1aa8eb1b9445a7f816e1f1b8f1c

    SHA512

    4509b4ee350c357e98dab085cd9f6299b69cb8297ec5822100fcfdb7f63425a0e743137d0d97aa6a2a4ff4a7d80365a8df27b9bf088178c165e208b656e68a84

    Download Submit