Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

17ce802e95...18.pdf

windows7-x64

1

17ce802e95...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 13:04

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    17ce802e952c29e9772906ce08d8f336_JaffaCakes118.pdf

  • Size

    59KB

  • MD5

    17ce802e952c29e9772906ce08d8f336

  • SHA1

    43d3e71ed045d1e97e8ab800f0be04a627b98219

  • SHA256

    1af6c3961d6cbdda6d978027e98351e3d8739905d6ee343533cb277fa8b5eca0

  • SHA512

    0ab297a38bbdc9f94b9dcc86eee8902a58e73ccc2fce83b39f44fccf463aa7e46163badd1c976458c59df6199dc65ceadc11da0e79b0394a994ede1a2427594e

  • SSDEEP

    768:GgGzpDwp9vpl9b/X8Mo2dfzHAPEWv1dY61xcITe+nyG6KfWZtu8dkXJ2GNszKlyp:TGF8p7edfyRG9fWZEpN9lyXMG7v9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\17ce802e952c29e9772906ce08d8f336_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    551c0ac78e5c8aa3f656bf990ea5d8e9

    SHA1

    81f0eb120d20667f72b63e547a7f72fb78a5f124

    SHA256

    2c381569796f3998c3eab25591e51b9e31ae9a43de4186c517282d0ed273f73f

    SHA512

    12c49e4e011734d140ded19c63d9b2085c291a110d587ed8445eb9acf209e28d9be7cda43e2816916f965bd49248b83ad64a8d5c150747b71f88ad4180d69c34

    Download Submit