Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

ae1cec7382...18.pdf

windows7-x64

1

ae1cec7382...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 11:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    ae1cec73824039921be052a888338ca6_JaffaCakes118.pdf

  • Size

    49KB

  • MD5

    ae1cec73824039921be052a888338ca6

  • SHA1

    5d17a0c7d14406c5fc10f4c7ca99912e3b97ae43

  • SHA256

    83e38338a2f0f5953014566d624b34e5cbab0e1896b580cc69c029bcece0e296

  • SHA512

    7d880ad30403d222d7f61fe7a5f68716662215e067c3feca5a88c87c44a2e6d83bb06eb79715f00a2682bf982d0c5426a1f0f5eb55b01d84435362bf708ecf29

  • SSDEEP

    1536:kGFgpA17pfLMfq5kwyf6Her7Op+Syik7oI:xFgpAz0WL06S6sSyikj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ae1cec73824039921be052a888338ca6_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2088

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6efe47e080da2e96ee69e83a1f8ed2e7

    SHA1

    074a0efb961eb64116ad5cfd9be668a137ad3145

    SHA256

    920aedeb6a7f940a5272e4166945894dc39215f4f29125da288a5d217eaabe86

    SHA512

    add6fb73a205cac1425f4b6d3770bb721ea0f9b51a92e31153065c36723f2b9f626e2265cd4e6bca36260ee68554dc94de35daf627648a55b590e1e85b261eac

    Download Submit