Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 12:36

General

  • Target

    Specifications/Winter Jacket.pdf

  • Size

    380KB

  • MD5

    499f9bf28c924b6c893b1ac0f7e16ad0

  • SHA1

    90a1480bcd67d539284423826a3bcf4e1a2e8018

  • SHA256

    7d0ed8845329c1333e4825bf6ab2385961e22d36b3f66729b4ca69b01b325e23

  • SHA512

    233b672a419dcd8cb3c26c37d05319e466042f0ab44fca01f34bb67a8270fbb6dbcb75c0899effbbed568fecb00ca886ee75569cc278d7ad1ada3552d9224b3a

  • SSDEEP

    6144:aa3ALW7KqsQvKCyH6ryAO3IweuPZtlaVE5o9V1wamG+m1zTZgX86n988JOkMxFIt:a/qJsQvfrW3IwBZxU13f11ZgMk3JXMzq

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications\Winter Jacket.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a0948811de8841198e3803d112c46bbc

    SHA1

    c23ac276f70761bc9455a0f676f42aec1385b212

    SHA256

    844a5afea35dc3f288508e44e1d690485f8861c8ce401e998c8ca97d3806a948

    SHA512

    34d7d3ebcd005adfd3805ad219d48bf78155cea40c3125d3d88f8a6700468e821494cd7665422601c8f8dd71b7960286c415167499f881b5981abecb16e0d41f