Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

1

Static

static

_POOL13G.G...53.pdf

windows7-x64

1

_POOL13G.G...53.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    164s
  • max time network
    45s
  • platform
    windows7_x64
  • resource
    win7-20220812-en
  • resource tags

    arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
  • submitted
    10/01/2023, 17:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    _POOL13G.GIGI0_1001231653.pdf

  • Size

    203KB

  • MD5

    efd79c9c6fc4b830d0b1cbad05c25a2f

  • SHA1

    648aa8d51dfd17a72c7a29303e766badd0f0a0d4

  • SHA256

    8fb647e4214baeb0588b6fec0cfd297737077181878a8daa59dba80dff151f5d

  • SHA512

    51dd4f34089e061a8e98256104f4f7bb22eab0c07b2ecfbb4bac0841426c213d1f18909390262659aa2209d22e13629fe3ebe49c0422ba0341ab2a6ca029e61e

  • SSDEEP

    3072:FVnnIQatmDjgzzXHvFJhUJLfWJpgxHyTGD+/f1SOwCfQC2YIHcOcE6nBvC6+PaD7:izz9JhUB1hD+/f1SDiQo6gFBKij5ms3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\_POOL13G.GIGI0_1001231653.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1564-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

    Filesize

    8KB

    Download

  • memory/1564-55-0x0000000002170000-0x00000000021E6000-memory.dmp

    Filesize

    472KB

    Download