Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

67b1952b03...18.pdf

windows7-x64

1

67b1952b03...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 15:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67b1952b0382ede5d13a19df5c92b3f1_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    67b1952b0382ede5d13a19df5c92b3f1

  • SHA1

    28e1f41116debda35fc91faa4ade091ee7230f3d

  • SHA256

    c4cad372de4e93036e5c5748c8de796daa2d57db97adf7f2a22ef529bcb6bcf7

  • SHA512

    1b435bdfcbff1256beec6fdffe454fd615b612f98f5f9545d3b3ea94a584d82eceb6369c7cc34373e32791cc1b0fba346c6c293b57ffc1b6ac85e057965e07bf

  • SSDEEP

    768:2XuMZmwgCLWarHKLDOKv18HqvV5awa9br1Cx3D:2XFZmGWSuOk1vavZhK3D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67b1952b0382ede5d13a19df5c92b3f1_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2768

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    97ec1ffe430705050370c9aebec06785

    SHA1

    fb0cc38a1b9a284357e2a3a36abfa6c07561f111

    SHA256

    aeedba8817473c02a0d0e5b4ddf369558a9652b1a936c681e3c85b577d0b5c17

    SHA512

    1359c3de0c4e2a73977d20edfdd1acd0b5734ccdf9a4be651f3a3e3167b0f960a959d30f14ad6539453e206464f240d44df9c0eb9f79426669eb1c71815a9a7d

    Download Submit