Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 05:23

General

  • Target

    3898314ab32f0fd68a6680783faa984b_JaffaCakes118.pdf

  • Size

    82KB

  • MD5

    3898314ab32f0fd68a6680783faa984b

  • SHA1

    21cfa4f02df75c7ec37103a17bd947bc86bccc67

  • SHA256

    7ef91951b115cb9dce08a568aa413812391e832ed5a0b4b3843219ccb1ae14a1

  • SHA512

    8901831aeb2ce8e9de91c9a1adae4d8c94781fe78867b340266d5453ba154e69bb533b7882e48da153b6d659ee1baab9c54325156c941040f7e68a0439c2a9b2

  • SSDEEP

    1536:wGzt5Bqm3xwlq9Wv1zLxV8LXcN6xjqfHxjsTkmR4n+4GQnymIteyBPgLHu2rnd:/npGq0VMXcUxMCA24WmWXBPgLHd5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3898314ab32f0fd68a6680783faa984b_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    43c60d08daf5d227af9cb8ba12d658a5

    SHA1

    5add88e9f255ef2e70603b0bc21b399fa5abd6ae

    SHA256

    3adbbdb231137692f906cd53ae8b2d1a242a5bb3c5b1152e53f32a8f6349e0e4

    SHA512

    4840c3bedd6256eb0788733e7d70636fff7e642cd2544b4bf8ce79fc29a5b85b47cf1fe12e67e606a7b5d20769ba1c2c1678d9fa5c0f89022a199568e78a6328