Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
29/12/2022, 15:04
Behavioral task
behavioral1
Sample
Final Version program of the APAA colloquium 2023...pdf
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Final Version program of the APAA colloquium 2023...pdf
Resource
win10v2004-20220901-en
6 signatures
150 seconds
General
-
Target
Final Version program of the APAA colloquium 2023...pdf
-
Size
472KB
-
MD5
d8875f01251d9f78252241b543f52794
-
SHA1
464f913e263dfd13d5211ebc2430a9e1d892611b
-
SHA256
d2be073a16ab81c6df6b277d38db221de5ec390ff7c9553a3bb6d1dbf87d9a9a
-
SHA512
5a5a26a1ddae7a8b3da18f9ab8f67461eb10a175799e094134fd042bb4e109851b7fabee4b96622963fe1db37b74d205a75ef668239de03d398db031208f9f40
-
SSDEEP
12288:4mA1GLLbj9s9lptBmTwrQcKuI0yTNkfdTiXcBq7VN:41aXjklATwsDPNqw
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1720 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1720 AcroRd32.exe 1720 AcroRd32.exe 1720 AcroRd32.exe 1720 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Final Version program of the APAA colloquium 2023...pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:1720