Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

67b9718ec1...18.pdf

windows7-x64

1

67b9718ec1...18.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 13:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    67b9718ec1c98b6fdefabe60d531c64d_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    67b9718ec1c98b6fdefabe60d531c64d

  • SHA1

    cc002d6bc25eaf7f7f5be5aa850c94ac0be0dfe6

  • SHA256

    c3e4d858b7a3c94079feeb6fe50b69d399343454b2ee9c9a8aae2d8b51648513

  • SHA512

    c6b5eef08dca2b522111a69d63a08c4fc03d1e91427ca993128503f8129d3c93ce4a3d8bf6f362ffcafcf3abd891c716d00e2a8f650f49e3430bcb93f74abdca

  • SSDEEP

    1536:Iwul49Yib0cNDV3wjinhgImdCmTd8kOQ6HmvWeJRWXpO//IjeoWCfFEdL+3NC:PuqWiBZgehjACmTd8k1hDR//cecc+I

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\67b9718ec1c98b6fdefabe60d531c64d_JaffaCakes118.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2840

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3e8f2d00ac81e6de335a7b5d1ebb6709

    SHA1

    c1a6958b1a8b2e1d84f0a8ff7d10b834c94ab567

    SHA256

    aeb9688a1f07701a079cc135fb35e07755ebb16ce130418a0c7e68a3b31031fe

    SHA512

    1c7c96341c1590ee04e53ac5f1b70b4c4d8b3e803528f06873a236313bff1a7bc95d2fe36bfbd993c40dddfcbf08d915518f56ef58705d1bf77630847604970a

    Download Submit