Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

097a5e4e7f...18.pdf

windows7-x64

1

097a5e4e7f...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 08:56

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    097a5e4e7fb4c9a0e62713b5a3af663b_JaffaCakes118.pdf

  • Size

    18KB

  • MD5

    097a5e4e7fb4c9a0e62713b5a3af663b

  • SHA1

    32fe33a280f5bed3f7d1c4f131292fde99b5e00a

  • SHA256

    7969b743852166e7e1df5064c635226b6c125355e55e48aa87b3da8189f9e378

  • SHA512

    cc5de1f6a27a731a7d8c6993ea17a011da3034c4dca89baaf93d28b42799c4c234e518120b9b95a028e14816d6cfef58654c6404691281ba46a28345dedcf12e

  • SSDEEP

    384:VzKbbfPYm7z1KZmUMOFYzFYLUYgzgcAYgogFZYglgWBvRH57/SNaReYzuVUdvYjX:Vz2PYMz1oCqvcqFkWhdZaNWUedUhm936

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\097a5e4e7fb4c9a0e62713b5a3af663b_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2868

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ef8a15145af0c543fe69d9dfbf72e830

    SHA1

    499f5b88f1b4ca7fa1a67a332830d30d617e1aef

    SHA256

    47b101e7376c75025edd6f8b22b7728a406a741db331b3412753f75fe09b58d4

    SHA512

    fa76d1142050f58a9bfc96cbdedb513fb852c9c7596d66ed71a66c8a69d05e4463e5e556d29bcf63359fcc99405623c3c436546ea2b594bc1b6b94f312e4ea89

    Download Submit