Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

7e2b222d75...18.pdf

windows7-x64

1

7e2b222d75...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 19:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7e2b222d75024c7c364651ef4d6e616a_JaffaCakes118.pdf

  • Size

    36KB

  • MD5

    7e2b222d75024c7c364651ef4d6e616a

  • SHA1

    44a493bac2815b73a4eece4e3a3c4c41cc5bf79e

  • SHA256

    ac4617818afcb50cf38298fde07156e71fcdedae2249385c4f3c92c476d84ade

  • SHA512

    3d7602791b2816740d82b6c3ea048fb04e7486651a9aad67e78112aeb360d40b522bbeb2a1852ec16e178d34931b54b041228ddaf683e933825ccaed24260be4

  • SSDEEP

    768:KXuMZmwgCLWarPdgGs2fpXRtIwQD6PoFH1gcvbvuJcr:KXFZmGWSxhTu7FH1g3Jcr

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7e2b222d75024c7c364651ef4d6e616a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2240

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4ab4fe25693e687ac0e530af8a0439d8

    SHA1

    15bd8cc71f3302d6981e78d7e98697fa52862b82

    SHA256

    e03af2b20ec866271b6cdcea39b6230b86ed551bdec26cf6a8337a7e3e9791f3

    SHA512

    b4248d1e72e153c691cf09ed4711be8840611b9f7dce2cf7ee0d138daa310d499a85302e5013f29dbe47a1d4d43bcb30538c52efe83e3fc8fdc826a3b28f078f

    Download Submit