Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    24/07/2024, 01:45

General

  • Target

    69cb5420687afd4d186d6ea608bbb1df_JaffaCakes118.pdf

  • Size

    12KB

  • MD5

    69cb5420687afd4d186d6ea608bbb1df

  • SHA1

    82aad236446e27d32d8d2e2d39ce12d03ce6b11c

  • SHA256

    c37f6c5a05d40aa644f116dbfb67c8ff81e1ddf0061f54acbd1a49837dec3893

  • SHA512

    3c4507d168af804b6f7aa68398542b0b1d2c27c9de0946ae5fe9d1082a3e540cb66f567f8d545ceceed8203de1c99c1c619067e4d7310006a69e7eed40e34dee

  • SSDEEP

    384:mLEMlLEMyszoaKSaKIzYvEim01GPl5S8pRPFOF++:mgCgwoZSZIEvEiF1GPDS3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\69cb5420687afd4d186d6ea608bbb1df_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:1020

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1020-0-0x00000000032D0000-0x0000000003346000-memory.dmp

    Filesize

    472KB

  • memory/1020-3-0x0000000002610000-0x0000000002611000-memory.dmp

    Filesize

    4KB