Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

4258da59a1...18.pdf

windows7-x64

1

4258da59a1...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 15:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4258da59a12b5b828212cc4b0a3ec70f_JaffaCakes118.pdf

  • Size

    66KB

  • MD5

    4258da59a12b5b828212cc4b0a3ec70f

  • SHA1

    84df0d662a697ef2a81f4231f920c2f8950263e5

  • SHA256

    9d4c1de91876707b3f30aed1dc0fabb3b398dd8553b7e193c599b786c8a7efce

  • SHA512

    f30355d60e19a815c11ddc6c0c4686ca7389ddf0430f7c6db3a166c2136e40888a5040546c492036fca377cbd044798809b524597e72480453e21155c6dc10fd

  • SSDEEP

    1536:cSx6SQLCWNWVMLzbajKoX2nsvyiNIt1Wcww+Bbw5:lx67LCvrjKoX2svyRt1WKum

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\4258da59a12b5b828212cc4b0a3ec70f_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1356

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    82d5ca5a4e8828704508fbb86240494b

    SHA1

    2a2bf2435b80c594674ae0ae789ba310e4c506b2

    SHA256

    86c45ad16700494ccee3ed081b112955ef9829fc24b20828a9e967a4d3d96628

    SHA512

    7c8130c8dd4d706c58ba87ed93765081a5836c3f77bf05889300f4fb99ef0fe75857c9124d0600336db8821739173695ba7d4d2f081f34c9bc603026d3c6a100

    Download Submit