Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5eee28b846...18.pdf

windows7-x64

1

5eee28b846...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 11:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5eee28b84601da72d2ddca167c8ca753_JaffaCakes118.pdf

  • Size

    52KB

  • MD5

    5eee28b84601da72d2ddca167c8ca753

  • SHA1

    2901989e92b7d51e88d0246d2c14d972a32f32d9

  • SHA256

    b708bd341ff6e66dd6d524f4befae66768e6f934ac2b1ffddb925e8a4f04c83a

  • SHA512

    08d3110fada10e2c9253b807db096f4f74a9c7b6e474e711e1edcd1396b61a0f5764b1e7a0e847cc67d6e2a1808e16c70fbb78064d79b178a64d5da6cd752e67

  • SSDEEP

    1536:GGFiuotrNhl8vbnFmkrDxgtapN25cYFQEio:fFiRtrNhzkhgY4R68

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5eee28b84601da72d2ddca167c8ca753_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4f09082a98d3c7cf3597ec4f53910c74

    SHA1

    e58c9ce0b6a5065a4e7ac99d239754086a6de7fa

    SHA256

    b5fcc93727f7f7661e75e590d6cc765bba8dc087420992d75451d67b90bd194d

    SHA512

    3d3197adbc815164234cbf27486a58eca7308af07537e5e236ffc3f306c53c8df820fc66c89ff707a2a8fdcda2c9c4fefc2f8b2e3129d8ffe661fdfd561c7de5

    Download Submit