Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/10/2024, 13:01

General

  • Target

    183178cc9c791e99ee9323145443c640_JaffaCakes118.pdf

  • Size

    88KB

  • MD5

    183178cc9c791e99ee9323145443c640

  • SHA1

    9bdb5e44ff5343a9f8d0d45646710fdcd902acaa

  • SHA256

    1f672c763b34bba3416d17caf26ef2b9e9ac1edf708a371140d05954b1ee5347

  • SHA512

    d0e9aef6b29e0b8e59587bc55a28b9a398f8fec71ad7a2c17a07319b45279b799bc90270bacea4cceaac872b2b2077cdf741d84324b8dfde495eae482b763051

  • SSDEEP

    1536:P1QG8mj5+VXKG6MapvaR5rQ5q33ECgMocEWYIid6xGX6oWOpOaZtZ0NdR:XnjEVXK9MaiR5rgqHExyy6laZ8B

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\183178cc9c791e99ee9323145443c640_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    747023696fe029c950802608cc4dc4cc

    SHA1

    06db8f40c825f353371b3bd607fe1a6009ee80d5

    SHA256

    b392696e9a49d1259efc4deeff8366004d6f5469b75dbe16ea6c1e028cd6d6bc

    SHA512

    f9faead844e1500b0a487b9bd3393046654c6b21a33325414c905f59594bc637642c973ab0e1b1b96009c1198a8a210d621434c29408cabbe0542496521f01fe