Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    139s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 15:32

General

  • Target

    0f62c79f15a6be850907695359952e8e_JaffaCakes118.pdf

  • Size

    18KB

  • MD5

    0f62c79f15a6be850907695359952e8e

  • SHA1

    385c43b655d000802c0ba86475523ee46ff244d5

  • SHA256

    c53d351a4a72c4259232b375865d5065566cc585c40b0bc652c0230282362e6c

  • SHA512

    637885eaefc1aa3e4e31155f944ae0d73fb0706a1cd1572ea93ccab7b06af41ae9237a3e7936f0033dc4d3a605b29cbaf48e7ce00861ff65a95250300771276d

  • SSDEEP

    384:WysN4XC1yxC1yB9Df9FW99TTnintyoM9NP4F+:vS1yY1y/E

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0f62c79f15a6be850907695359952e8e_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3056-0-0x0000000002680000-0x00000000026F6000-memory.dmp

    Filesize

    472KB

  • memory/3056-3-0x0000000002170000-0x0000000002171000-memory.dmp

    Filesize

    4KB