Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

a28d41d8f6...18.pdf

windows7-x64

1

a28d41d8f6...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 21:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a28d41d8f643e785ba839ac2493a8977_JaffaCakes118.pdf

  • Size

    48KB

  • MD5

    a28d41d8f643e785ba839ac2493a8977

  • SHA1

    a6d751fd7ad68192815ee2b6f869920f881ce3fc

  • SHA256

    3135fc38d1bcd19d57d009165472f8398dd841cdeaffc752b7ea3410a2f3f5af

  • SHA512

    1d99638cd460ee46bcfd290d7535b74d4792788a30e09d6ade8bc9688b781e2a6dd3d3ee050c125a563db58bc1214fa9b364830024e9ccf42fbf49a13840f159

  • SSDEEP

    1536:eGFkm4GvD7w3vNQlClZLpUkaKMxevLuovbmk:HFkmJ7+m01UqMxOLhvbh

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a28d41d8f643e785ba839ac2493a8977_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2784

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    da88414cd89b0e2789552e2a09934ada

    SHA1

    9395a2d2f561074c4b6e7b879c620416c270df2c

    SHA256

    78c94b7433411344091d2c98c1d06a35eb9b9db672083c53923f6e763376ecc0

    SHA512

    c52825700236635d65ab601ef3416fc84573063a40bcda28ee25a8353d054a77f1529372e25d5c49e737370379685cc4e62b9dd953f5585fc3e0ee21d35d18cf

    Download Submit