Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
22/08/2024, 13:05 UTC
General
-
Target
b7bec867f1f2fee6da2859c515a9e1b9_JaffaCakes118.pdf
-
Size
93KB
-
MD5
b7bec867f1f2fee6da2859c515a9e1b9
-
SHA1
2b95b1cbb0af977241c7853ec6161fb323179e5f
-
SHA256
21a8e843b05fe6cda18f611d475374f3970ecfd5b99293b1f89ae2ec6b19b1dd
-
SHA512
126c1653acdf785c566ce442c2c88bf58cb604fcddb2cbfceee3858dfc2cba3d8fbb3610e17986dc8b9a655dd33104ec02f88230a11361cd8069254b649b6781
-
SSDEEP
384:B3GM+EWy6fHQ0HTNFH/ZmF+ndAUH3YHQ1Xrg/qwLHjWYyvdnX2HHH1OHrRv5uWvw:DH
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\b7bec867f1f2fee6da2859c515a9e1b9_JaffaCakes118.pdf"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
Network
-
DNSadv-neus.inRemote address:8.8.8.8:53Requestadv-neus.inIN AResponse -
DNSadv-neus.inRemote address:8.8.8.8:53Requestadv-neus.inIN A
No results found
-
8.8.8.8:53adv-neus.indns
DNS Request
adv-neus.in
DNS Request
adv-neus.in
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
472KB
-
Filesize
4KB