Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2024, 00:58

General

  • Target

    450b03d3c96640d37cfbfe15435d64c4_JaffaCakes118.pdf

  • Size

    34KB

  • MD5

    450b03d3c96640d37cfbfe15435d64c4

  • SHA1

    edb9836afbcce31ecb2056aca0fc68c97165c2cf

  • SHA256

    31245fd18af64c5a43b909b96c792d7244c325de5daffe372244c4103d747d22

  • SHA512

    228592219f76a6c22f3160ea61d3cb2befc152b6ef69d857c9e5bb09905147f2b46a050fc5c47fcfb81ed4bcbdcd5880e5f1804d6c00ee5c031f54228e092f33

  • SSDEEP

    768:jtmB1eXFsOJZ1CZ3loBUk9n7/FRqflU+YlJ:jty1yoploBUI7//anYlJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\450b03d3c96640d37cfbfe15435d64c4_JaffaCakes118.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1964

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7489c21235587e7d14ed9cb6765aa571

    SHA1

    ecbb71d4facc7db0f0147d5526e8be4693c4bb31

    SHA256

    23a4f16fb788c3daeee72ab80833b9168b966bf9c636ea048fed5c1b47a2a7f9

    SHA512

    ade7dfcf4e80e23d93aa50b0a51dd7025932ecd0c3ccfe53df30e71e69b55eb880537c9e1815322ed02cc426fa40e3b9e38254abe7fadde3d92a11c054b90941