Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

3790b4f5e4...18.pdf

windows7-x64

1

3790b4f5e4...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    11/07/2024, 03:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3790b4f5e4d93ab9f274e63a83789658_JaffaCakes118.pdf

  • Size

    39KB

  • MD5

    3790b4f5e4d93ab9f274e63a83789658

  • SHA1

    ba49a51a2dea44a7a61dbfed7d262fa5ccdc6ea4

  • SHA256

    85160b0b9a542ddfcd05cc8812a2cea9e8d3222473a0e084e42c510dbb772e0b

  • SHA512

    141720a7555fc6cecc84a94f6f9e2322782764444c9a5fce6c481f793cac8a4cb701738d088b1039be039842ea368b6e07a601be60f05f0630486b1fae4cd4f8

  • SSDEEP

    768:8gGzpD+xIv+Upwsuc6DYSI/hGbRAWyfFHmDcdEGgUJGT0oTkTWm1:ZGFqs/uXDYzhaRAWyfVmDcJlhv1

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3790b4f5e4d93ab9f274e63a83789658_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2624

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    57c64e3d591c3c9bac769e353998e87c

    SHA1

    2d53814a2fb5e0809f7bc3ccefe24bfe467feaaa

    SHA256

    164cbbe9bf0af8bdfad1f92b9cb4f1778df37a24110a1e870e7f54a4c33f7640

    SHA512

    b934fe2c060475cf1d62cd2087304145bf6400355e5c6f8e26becef77b8d808a31374982ba55fe3464f273ea6639a2181659c38af1fb13e23274a34fcf596664

    Download Submit