Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

2f081eee8e...18.pdf

windows7-x64

1

2f081eee8e...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 12:11

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2f081eee8e6e530ec48f2734429338bf_JaffaCakes118.pdf

  • Size

    57KB

  • MD5

    2f081eee8e6e530ec48f2734429338bf

  • SHA1

    7ed8b862a0b8a0fdb5ad160644f136b8842dd649

  • SHA256

    edc9ce4a3719e6237479f4099968cab895fe2826f1c7ff82ff797cf8fb940c71

  • SHA512

    36c119568b343887f2ece8a5f06720e51a312654f6cd26c211bbeaf5c576d9a6ea9a02cde0dbb0123115ca841ca73ad2874d3692b1c7de9d2adfeb5f86e37053

  • SSDEEP

    1536:tGF3zkfSAjsiqRzPmIBTtvx7quWxQxU6SuUN4:wF3z5AQiqRbdBZvAhQzSut

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2f081eee8e6e530ec48f2734429338bf_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b37c35bcbf1c4120e233f63a4a8751ff

    SHA1

    18d79166608a27d7613c4c200a6556c5a6589b92

    SHA256

    1f6d23fd03556c6d06fe2ced8e6d91cabed5bb975e5b8eb20c0a07fe4f6b71ed

    SHA512

    cae83dd6fdd7a022e7e8925e5f6b19e65fbbd3ee63986f3dd9d3e99a6fd758dfed9dc429b6adfb94047d54f9eba45d0f9c00c55ba207add292239e02c4fc08c9

    Download Submit