Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

a20d2f69a8...18.pdf

windows7-x64

1

a20d2f69a8...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 19:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a20d2f69a8d241ede737d094f00cf433_JaffaCakes118.pdf

  • Size

    31KB

  • MD5

    a20d2f69a8d241ede737d094f00cf433

  • SHA1

    76257c9934674db16f582d13f1aa1845e5245ee7

  • SHA256

    143d5f5744a29c38713a9597a42148430384c41cd8b5a584bba23857f16a3886

  • SHA512

    53e9490deef91c0059959a8d5ed885fcbc6a219179204d7932d731aba6b96fdc1db5497315f59898d4d72838a642ae056b54bcc98df8d34e72ab453f708f01b7

  • SSDEEP

    768:Orc/zsAcuTEBp/xI8ZWsyJzv9q9OnyZ1phA26Z16aVLVoiN1GP2VfvvE5SXuMZm7:O0sAcEufI8ZWsyJzv9q9OnyZ1phA2y1U

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a20d2f69a8d241ede737d094f00cf433_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1572

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    685c241438bebec66b6621393f58093d

    SHA1

    1a23211180fb1bcd389466955bc4036e7e477980

    SHA256

    7f77ceeb3629e82b052ba0ecf4be29c9625ce17e364bf589a259f87c1278f46b

    SHA512

    2e1aa53543cac7ce044923a09c6f28ce980be5d28a142f2bc361653fd894ec82562e6d39a7da7418eceb0fdef2a071150e7b4a6422aecc69df8e7b99096ba78e

    Download Submit