Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 18:50

General

  • Target

    ff2866f3a71b2a68f6d127b4db9eafe1_JaffaCakes118.pdf

  • Size

    73KB

  • MD5

    ff2866f3a71b2a68f6d127b4db9eafe1

  • SHA1

    a9d67e01959bc169861da25d1a9106c157902dcf

  • SHA256

    e7e2c47162ee0cdff8c5373bcb7c8aacd01b56e6ccf33d662d0271b7200ec151

  • SHA512

    15a0fc6408ff86d4de0f8b03111513c014064f225a571834e996a0176c7919d5e1651ce49dc4529f18356c155245fa8520ef4355c69e1fbac127a8d12a86456b

  • SSDEEP

    1536:BPvesQaCLGFN2cYZ6ihzmWypOlWWxVSNtnVih3vH7vrNzv:BQTS32dbh7lDA7nVih3L9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\ff2866f3a71b2a68f6d127b4db9eafe1_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    39b3ccffd5f02b6743ab5e1c443c644a

    SHA1

    9d20752da803030cbadd764f5fdc742c463d39e7

    SHA256

    9cd9771b46dca06748829a0105bd79ed92024ca32aba5514240b0cc9c97a651b

    SHA512

    3eaf3f1bed83147a3a740884c8df5f041083387ef9a2443ac39b14a0a55333cbb60e8733c88a486e79df9c71f1595f20382bba8ec068fd844f2e5d6b5c0b74bf