Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0bd100c461...18.pdf

windows7-x64

1

0bd100c461...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 12:39

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0bd100c461a2c22be6cb188ebedd8d47_JaffaCakes118.pdf

  • Size

    44KB

  • MD5

    0bd100c461a2c22be6cb188ebedd8d47

  • SHA1

    b3f1d212a8cdffef825a81ae5870ed1222700c53

  • SHA256

    aa0c602b0608df94e1e4899184f5cfcdc66ece6eb2cb5be05a727c0fe3f90729

  • SHA512

    8d5361788367d2e97205666844725f27fb524bd4ff9ea4d51bb32ed4e8f89e651d044b103f2015ad28e80b9d548a989c8e6b38e960ec1f15b23b18c3fbc3b9d9

  • SSDEEP

    768:NJiQGzPXour39XRnyJcQzfuP5sKb5P2qMH7O4+xQaFqvOyGZLHvpY6B+eiA:XJGzPXR3Xny/Kb5P2qoOhQ++2jJ+eiA

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0bd100c461a2c22be6cb188ebedd8d47_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    af64a75365d42496932e78f5b73e246d

    SHA1

    98d80c91dbe94e81ed62918655440480a1e1bfcf

    SHA256

    493e36ca0fd7f9a2253e412321a89acd1a6dfca19b4abc438c94e1c0bd54bfd7

    SHA512

    937670330676950beee323eadee67c81feafb1f83bef4de1ae1d969b8e6c14d9609476b2157c3626cf50b1cb8fc9f3a515a2d0c33f5449c353897b69d2280264

    Download Submit