Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

13/06/2023, 19:03

230613-xqrktsag94 1

13/06/2023, 18:15

230613-wvzxbsad7z 1

Analysis

  • max time kernel
    122s
  • max time network
    33s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2023, 19:03

General

  • Target

    DCJAMLIBZIWJFNT185.pdf

  • Size

    60KB

  • MD5

    024f777c971d77eb1af37e6891752579

  • SHA1

    114f9a34cab92cc3bc7a0f65d777d671221aeb02

  • SHA256

    4e9973142d6ee089c61830fd18e779c3385c1a41c6799df1888202a61e65a5c4

  • SHA512

    813fe1eb28d81c2d14127bcbba19b6f4bbafd8efa8a5326eef5d5b34905cd079669fe588d942b1310dd4b00a1b0f19b8abf56a150e6d4ccc99ed82f14810f0e3

  • SSDEEP

    1536:TZH3x/HM9Zy/t0rVndSMrioIK0QOcubpBoSQkf:TZBWy/tKnTLubfRQkf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DCJAMLIBZIWJFNT185.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    5b9c82ad21a8f14ed932ae425f53d69d

    SHA1

    9ae57fd120c1dbe397e851663584c3bc3e19cc20

    SHA256

    a109f3f9ecd2566a23a3bc0434be8faa3ef34c4d6bbb5fce06e774ca88ca0f66

    SHA512

    d7ca3eb4a58365ff523447053e7444ec9208d448b31866d688b7ec98f0c35dda5208b8fcb72d51fdc0d8e65334f78c07fdda74102d0d0ce43fe1693a6d42da6e