Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

6618bb5adc...18.pdf

windows7-x64

1

6618bb5adc...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 04:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    6618bb5adc7d0bfd356b79fe18f985de_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    6618bb5adc7d0bfd356b79fe18f985de

  • SHA1

    8ce2d44eb142a6e382548b598059b1e688ddeb17

  • SHA256

    040f4bfeb4bffdd363bdad420618cdac4ddbc1e93595b1b15ae5446515905f53

  • SHA512

    2457d7fa1425c6d628fdc68f1089e054d1e9479ecfea7c02e3d17a04efa325598cbf666081949e0ec001e006887cb4ec1fbd6865d609de24d7bfa0e074ef2719

  • SSDEEP

    1536:yLpDEX/nZGhjg+bSHE/aDuayRLJNCD/d6xP5d5CuBW1iWrshWApO6qAf:IaZG++bcdulRHQ/zuEAo6B

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6618bb5adc7d0bfd356b79fe18f985de_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    5aad58be63d19caaa4df29ecd5e1d19a

    SHA1

    85795c81caed023067f31fcc3eb81d9880601638

    SHA256

    e3b257976cab303923b26e216be3b0f7bd4fdaa2f52be4dfc7e64fe7b6e814ef

    SHA512

    fdfafe2c3133aa8ac6aa4a40baba2330bb783539373b24db9f89502d1a8507969177d88e6a7bda7a97c36e4ca9a767aa9e08ef3287d409f482da4773a89e2ca4

    Download Submit