Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20230831-en
  • resource tags

    arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
  • submitted
    16/10/2023, 12:36

General

  • Target

    Specifications/Boiler Suit & Coveralls.pdf

  • Size

    199KB

  • MD5

    75aac9d3ee59e0b7b36da52d9514fdf4

  • SHA1

    5aae8bb75191c6e13ba41b79ea79625c75775fae

  • SHA256

    34a95418499036e33ce22cb58d29540e97307297a7a66a624dac43c79c090157

  • SHA512

    f86b5b76ef992084551582b9da7b18cc025f753155d828f34014013399b9822fc6605e8a0bdaf29e614a5e0f0e1659c6f230c46ef1f438edfbbd55e2e90bc141

  • SSDEEP

    6144:aQ4sET28FRYlGcsquQEqE+jj5qksLn/iDlm/4pxraB:aHsG2eQGhquxX+/IklpxGB

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Specifications\Boiler Suit & Coveralls.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1072

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    16ec30f5209e5cac9d3c6eb648dbcfe9

    SHA1

    763bbb4d755817d0133bf1a16fa3e765ffff65b7

    SHA256

    6c860f7497923a640033d0341f0a56311ea83598cc1fc83f0c6056a35ed5964d

    SHA512

    b44d60c042ead1386670a61ec540ef8ebcc8e81dbcf603d702dbd1142de7a6a0b3d281ac3a52df28e0e19c534f608cc6a381c80932dae3bae756b202e6cbe2e1