Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    30s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2023, 23:00

General

  • Target

    Docs_Request_06(188).pdf

  • Size

    44KB

  • MD5

    dd81d22bd51d31964fc745ed65f2fb39

  • SHA1

    f547272c2c7f8cf0672a64d74ed05969243fcaaa

  • SHA256

    bc887d2b464f0b656ce2b33c6573088a2d8b8a8d168ed105752fdd4c6076d6de

  • SHA512

    3a6749a55cf25577f349ae8ac92246612aed88168c98092861c970d53a1283968a6781096ad63852167c2dc37909c73cdde78b113a37aeeae1352b9a3ffb4e06

  • SSDEEP

    768:Cl2xGp7LsPaxHefgxpBQP27OndufSwrrRfB+vU8AU:HGp7LsPaxHeb27OySwrrRppU

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Docs_Request_06(188).pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1772

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0fc0c8c8d0e7355a872402b011f7e4e1

    SHA1

    d7048fa7986901a3b6bb1211e37e55deb3cfdfb8

    SHA256

    0ffbf376765d18ef407b8afdfe4559684f78b0ff17c5856a2f1ae9039bfdad04

    SHA512

    c4e549f4a98049e73cda9bcbbd53cc17d8155c3e2ba3234c72b927c81b8f8d446830ff86e6e3bac8760e7c1e17b101e8130f3a9fcd1645710095db9a530f870a