Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

3690469026...18.pdf

windows7-x64

1

3690469026...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 21:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    36904690269d49af90d8591215ee0189_JaffaCakes118.pdf

  • Size

    46KB

  • MD5

    36904690269d49af90d8591215ee0189

  • SHA1

    82b041221e20960a5cc6551624f7d36d99fc8762

  • SHA256

    b2534fb2ddc716f742de742174c59d4d6e3e5cceae7780c1b0ab413930f7fd3c

  • SHA512

    ed039ea84f8f55fba9dd26c1c6b157bb830777b0d00c93a6c85ace9fabc9a3187f04e835dcad4f81be864dce566e5ad63f8c305ad04e3c8327b6601b7a03de7a

  • SSDEEP

    768:ugGzpDPpAP5CPW4pnPNi2+LvDEksjzZUqB9twWJLiX51JIE8Clv1RjWXP7RgtGX:LGF7pPOEnvZUqB9twWEpHIMv1RjW/724

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\36904690269d49af90d8591215ee0189_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1720

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    084c2db2e5dbe056ca699443db32de97

    SHA1

    a5e20532c51b00bbe42d4689e927631f87a6be5b

    SHA256

    5b6a2c73c0d8656143cf868ae19a1145af0103f28f1b03c26539bdd4a1423866

    SHA512

    6c6bc0b9a8cf5e05e689853f4dcbb6197d123801b1f91791767967297e95bf24c77a163dc1e49ac9633dcb6239209034dd07cb93416ed899b975c06795d54f67

    Download Submit