Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

6b0b3455eb...18.pdf

windows7-x64

1

6b0b3455eb...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 13:10

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6b0b3455eb368a02875a895b790010ca_JaffaCakes118.pdf

  • Size

    19KB

  • MD5

    6b0b3455eb368a02875a895b790010ca

  • SHA1

    9f64afa8c4cb4c4c1302e3d957f2f1f09d712fa9

  • SHA256

    d950844453e2bf7f8af8d40b022f635c2730e4cbbaadff6b0032bd04f5a4c040

  • SHA512

    20edeeb18e09782c00825efb86c080e5258e5ea244395f16fa4e0cd00e10e02e200336b32a63a0938d6f2537273307209de376f0a8265eeeb48f56c527728a27

  • SSDEEP

    384:Vz65ZvEz1eAq65jwsStZo7trYO5Afe4qejVxsFtxDLWnpPR3BP7CdoyEsv/0cxNv:Vz4Sz1eAqKcsoZWtkO5AG4pjVxatxDaK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6b0b3455eb368a02875a895b790010ca_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3048

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    ef21e877b7f604c7d5ba66abd7ae6c10

    SHA1

    c8fc87c5d4007416e824063205646239a876bd79

    SHA256

    c07179c16ed80a86fddab240654ca28f41224010f93aae705dec96394752b8c4

    SHA512

    34b4c246eac9813a37cd0b1f67659841b59597bd5adbedda6a49e26912f611175b3feaca46be423f8e2e8edcc7bec20b9f774db3ca6ce8cc56bd6c388f816a7a

    Download Submit