Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

6bc75fead7...18.pdf

windows7-x64

1

6bc75fead7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 17:54

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6bc75fead70ab3906c87b9000723af32_JaffaCakes118.pdf

  • Size

    37KB

  • MD5

    6bc75fead70ab3906c87b9000723af32

  • SHA1

    faa39d2efeb88166265bd0f04eabe883cd2386a1

  • SHA256

    7526f43bcaf77f61afff722977af709e51092275e52dcdf058b2646c2f726160

  • SHA512

    3e89740c3b9e967c1489933effde4ab5077b2f489f76c5d86b186d3d405e3cb6221171d5ca609568221fb05b8db0fee290363710e08b414c2ccfa769fe09c8c6

  • SSDEEP

    768:AgGzpDmeX08bqsWEYSq3Muz9qdRcx5ccJoeDS31:NGFSeqYvc8cJxDS31

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6bc75fead70ab3906c87b9000723af32_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2752

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    650047a86ebc61ee4b1f49e235bd95c6

    SHA1

    b98bda17b1af34ab652b9c9d11dc2a701ae6f334

    SHA256

    3ec93ead705509cc02e565b65c4e57635133bfccc406fb0209d26ee13097fd21

    SHA512

    a5e8db7c05d8ba0bbc39eaaa3ee765a95a324651caa9e73964a7519065070cab54ed433eff2568305af4b3dc5368df4822370b422e1e3804ce1357e378d2435a

    Download Submit