Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

3c608182b9...18.pdf

windows7-x64

1

3c608182b9...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 06:53

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3c608182b92c88bbe9cf04df080e9922_JaffaCakes118.pdf

  • Size

    64KB

  • MD5

    3c608182b92c88bbe9cf04df080e9922

  • SHA1

    1b71edac2b64c7c3ddf32c3347c2a1bde25c10fb

  • SHA256

    28ad3f4ba08629d607b54780b42c9c65880aa75e4515f76d033b8f5711727871

  • SHA512

    27885bd322cd41724421e63fc525d408588f268ac1052bf9d0fda7e1fa44872a76e64be0c9b5b0773b08bd0f236885cd953a08f3d7f85f4333a4cd6ee365fa9f

  • SSDEEP

    1536:KV0isA83j7GPbu4O4BJELIR3mV9zf3O51KLMZWCpOViIWd0GRuO:W0ir8z7Gy4OCJB0zf3O51qVirRT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3c608182b92c88bbe9cf04df080e9922_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1724

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    18a570ef0c13305ccafb12e222e3a3d4

    SHA1

    b72c331911c00d79b68a8c99981f7ea2c7720ea2

    SHA256

    8c92297564dfe1d64b01cac292788f107b5eebe16cdf756c0a992eb9c2650683

    SHA512

    2246a206097acb5207cbb0955c8f6f63aa6752b4acee34dbd603d89cbabe334c9154ed415f749e6f8bab146fc01e4dd1184e84eb0f2efe0e06299f718967195b

    Download Submit