Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    95s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 10:10

General

  • Target

    d61a78d5df64a1a36746ab6c6045bd78_JaffaCakes118.pdf

  • Size

    98KB

  • MD5

    d61a78d5df64a1a36746ab6c6045bd78

  • SHA1

    0e375c9ee307f841e52dc57da7d61a695e597fbb

  • SHA256

    01b508b63e8b66ffb00c9992468bcf7c1bfaddd9f6a3d7f2f5dd47e12258b9b3

  • SHA512

    d430625668a19a5e55f20d19fe3a23d75cbc6c23f9b01f19e6fef9c0950ce3a918a190ee8e07b70d0a29e955650bb0f783568bfa16e368a00fdc53ba1d3bb9b6

  • SSDEEP

    3072:iYO0bWNDUimTt4pt/mt8O0EjONtQdt4lsv:iDZ/s4n/mtYEjXt4G

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\d61a78d5df64a1a36746ab6c6045bd78_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1656

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5c4dabe4664261a63512f7c7b98e30d7

    SHA1

    0aafc6b83e1e72911b31ae51f4705e93ada55cca

    SHA256

    5c0a425bdffdd9e405d0f036ed62e8115d0482e5f9f35e1a81a6e21aa1d60606

    SHA512

    84b9fe493aca33bdbddf442348c666e00f8b73b22b41932267a0e88d1a441435c4b31e8666a1d9d187984d8e858d01b5e66e023a31376d00f9f6b1b50c3ff3d0