Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

21ddc3872c...18.pdf

windows7-x64

1

21ddc3872c...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 21:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    21ddc3872c994853a872e849e3923356_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    21ddc3872c994853a872e849e3923356

  • SHA1

    2afebf0cdfbf6c8fb11d39d1290840003ce4d651

  • SHA256

    ba77a77ce9d3485fa11bf68182da6a47d0f7fdab3eec4bc52a8c7bae4fc6242b

  • SHA512

    e081fb69676a02791d6088e934b082facd9ea6044afd621501d11514803a3161fb7a52079b50eea9b17bdb4c6adbc7b49f9f7d98f57992bf754c5bc77ebecad7

  • SSDEEP

    768:4gGzpDHp9uHkPVZPTrF/pF+rwBujFkx/MiDnP+WrrGZkCT:VGFDpFuuDnPXiZkCT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\21ddc3872c994853a872e849e3923356_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    bf35bd7c54af69b8e77b0b6311b59758

    SHA1

    3012854dd3aae562a0d1f0f9a8804972cfd8f1c7

    SHA256

    401fcbce05ac97dc2484ab2286494284407a14643514760c9ddaff90cb7d2d17

    SHA512

    36cd3a75e76d54e917efbb4882aa337f4de539afa9aee00765bedfa2133efad261789eb4f47a055985971981178baa5e149c5d0f32db202bf2c2c2b4f903ad82

    Download Submit