Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/01/2025, 06:48

General

  • Target

    JaffaCakes118_f9f53dec15d887b6037a67f44e5df2f9.pdf

  • Size

    88KB

  • MD5

    f9f53dec15d887b6037a67f44e5df2f9

  • SHA1

    ac94f2413ee266194939925276f91e918f2c3e41

  • SHA256

    1558d990e8f9749779b3773723040fdec87e41b3be8c27bb9bc3a83f79be0608

  • SHA512

    9d8cf94b0e022a6f7c9e3647c808728aaa3eee24ca9238147c945c389a685ae67bb3866ddb54dce5a6993ce62f8922bd792ccc06b7f285ff50525910dd58cd9b

  • SSDEEP

    1536:pWFXa9WNoPbciCCQBDduGMx3GlAgvJ05YLAr4gjRLWQpOCoWgzoY6cF2vY1CrkvE:YNoPbckQBDdFMx3MAgx0mBgj8Chc9E48

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_f9f53dec15d887b6037a67f44e5df2f9.pdf"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    2626fcd19ef317c84cd27dc2b370c606

    SHA1

    7c625f487089c504da9865d88feea1030ad82632

    SHA256

    1fdb3f8d1f42638fb818d6952e4c536ae4afce11e9f0fc2be37e70664584ca1d

    SHA512

    f9c5bd874f48945c3249f87323ffb24f1cbf56476e01d32ca9ef699ac9b00507dc9410c91bbc32b620e689d1d1faa8a02dc33aafe65a718897943a62adbe10b5