Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/10/2024, 14:29

General

  • Target

    0b20e61a5d6b995493f97f41b14c02be_JaffaCakes118.pdf

  • Size

    110KB

  • MD5

    0b20e61a5d6b995493f97f41b14c02be

  • SHA1

    d7271fbb2cb15ab6cc7e8a6f4c6ed0c8916887c7

  • SHA256

    32998772b7b435bc712a183d7aace2d3e1ad64131fe5cc7b3dc8e8962037a6ca

  • SHA512

    d0acc9d8b84487d2f2d3c4ac29bbb2ec03b4564853c94608c29f3e699833c51c609279f2346d88e49b5c3df78c2ffb33a5ea824107ed51ca53bb1c5c97811981

  • SSDEEP

    3072:wpDnAnIqAsW6o/zmlDZ0lA2et550clkrD:ADnAgM8mVZhJhA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0b20e61a5d6b995493f97f41b14c02be_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    29b97dcf76f346c83e873f7a71ac25a5

    SHA1

    d047f4caf13f5a9881821e3bd940eb1c281368ad

    SHA256

    b484c62d824d61017dd7bf6603636e7d10842d702d8b4d5d95a31d8b91ec082c

    SHA512

    18b4389a7901c26be23f584bd54837b778483b1191dd6559a60e56f33f1ae432f0f18647aaa4c6090ee219846bb4370ef00cee4aba05d47964ae1c0e02543db6