Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5d2149e6c3...18.pdf

windows7-x64

1

5d2149e6c3...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 04:14

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5d2149e6c3df23cfd4d6d4804569ad02_JaffaCakes118.pdf

  • Size

    41KB

  • MD5

    5d2149e6c3df23cfd4d6d4804569ad02

  • SHA1

    85692716b04ac651daf762240774cd2f8af6038b

  • SHA256

    b3ccb7fe9b8e038749c47c95c30ef96d8b6f1a399cd071f828ae25f8083da7bd

  • SHA512

    7409a861cc802d628f30a3d9e1e6c455e7ea6fb25a8b169eb0eb424686f656f4e7342a11c41ff090ad2e0ba47aa8149b234a61496f5d9be288c0cfbad623d996

  • SSDEEP

    768:xgGzpDYpEPyYWVk6JQCOFCCJU7pS0UJzWMnuymOGU0bwVSFABK55/cMnksSWI9qu:CGF0pEtfJruVxFyKkSyWI9qdJhLpW

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5d2149e6c3df23cfd4d6d4804569ad02_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    1fe587d7f3e8abd1a4baeeb088d8492d

    SHA1

    58a74a4a59058d8c03ab7a063b341ee7aed33aa7

    SHA256

    392d44661279e824d4657d50d77942cf0b1f882131f000896194c59da91266cf

    SHA512

    8bdb1a4d16a087c5d283c72c06ef87bd4640e0f5534dd117c72d62ca6d65cb67c9cb68f20b7c6df494213f713994f5690f6c8867b8f342bffb371700b7a4f388

    Download Submit