Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

0b97b88ce7...18.pdf

windows7-x64

1

0b97b88ce7...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/06/2024, 00:43

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0b97b88ce7fbd7b9b5c642ad53d6dc3a_JaffaCakes118.pdf

  • Size

    7KB

  • MD5

    0b97b88ce7fbd7b9b5c642ad53d6dc3a

  • SHA1

    1edf7c0e596166bcff59b839edf8744aecb60f11

  • SHA256

    66dde320403d710fdb145c09a683b231731ae6466b26360e8ea50f08e85ea135

  • SHA512

    5db11bebb4d724b14b19daef75a0728dd6089867c497c6cd4b9d8367e441d9c6f8fc2f188ce287c40ea86773379f53118807ee6447961c53bfaa054bdecc7946

  • SSDEEP

    192:NP5ufk9N17/yna68KI9WU5R1aKro8qhiUihwrmWdfgft11gGYw:NP5ufk9NWGgU5vjro9hZihwrPdfUtbDb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b97b88ce7fbd7b9b5c642ad53d6dc3a_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    a6d95709ff6a9894bb929f33479b18f5

    SHA1

    0946f448c8ab09e79fe83b85b040a911c6760287

    SHA256

    5490cab34dbed3d6ed5c0bac46f66bc68f3b74a27f382388a3077ac90c0702b1

    SHA512

    02f89b082ec14f6c256aaef99ea6250afaa5823578000f8cac170a4aedd8fcd2dd4e2205da7fbd2c0e86106fe14db03e673b1f0e6dc3947f0c1aee8381749b6d

    Download Submit

  • memory/1704-0-0x0000000002CA0000-0x0000000002D16000-memory.dmp

    Filesize

    472KB

    Download