Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 02:26

General

  • Target

    df52715e50c39d8904188ef24efb5ee8_JaffaCakes118.pdf

  • Size

    97KB

  • MD5

    df52715e50c39d8904188ef24efb5ee8

  • SHA1

    e7cd7f998987c881a355cf250bac7bd2c48a61c6

  • SHA256

    55926b54d79bc1dd09b3bd9a1c27528acf8d02ecec36cd2d9858ec6f38d60125

  • SHA512

    22f5359d2fc5dcf60fbb504c5231bfe54c2792a502a27b82bfe052bd3ee6baad43611e787e20cd28586a71bd912bd9af64c742b2a665d4cb3e2a3a683c812bea

  • SSDEEP

    384:WysNUYpI3nLGZJaAOvK74aj+LDumC63CyxaTbCTD+an49NP4E+:pYpI3nLGZJaAOy0cCD0631sWT6anp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\df52715e50c39d8904188ef24efb5ee8_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:576

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/576-0-0x0000000003EF0000-0x0000000003F66000-memory.dmp

    Filesize

    472KB

  • memory/576-3-0x0000000001120000-0x0000000001121000-memory.dmp

    Filesize

    4KB