Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

30/10/2023, 12:29 UTC

231030-ppdctaeg32 3

30/10/2023, 10:24 UTC

231030-mfdacacc6z 3

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231023-en
  • resource tags

    arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
  • submitted
    30/10/2023, 12:29 UTC

General

  • Target

    PO_300000001553044_BNK-295980_0.pdf

  • Size

    162KB

  • MD5

    3835991bd0f023761f0b99ad41264624

  • SHA1

    d8ecbb5c589eb84e8e9559fe43bef792bd84f54a

  • SHA256

    bc1fbda98617ad411a26b19830af4c1800a9564db859c77cefd9ea1d61026b4a

  • SHA512

    5d72627c4554e7cba36ce5c393a6e5aaac39b5f956aced0d808506693f611344d2c72ca2812af7663df6bfde83eee77343b54973d43044cf83c76a08ade768f8

  • SSDEEP

    3072:Y7eaPHfENBbrLxrMbcmNvzUXGuy9N4MkGlYC92aZ7Gt0p2G+4YMZ27dVL6/Io:YfPsNB/8cj4VnkaZq0Mv4RWVL6/Io

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\PO_300000001553044_BNK-295980_0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    dc8023a224d789c7346b574a06edb3d6

    SHA1

    98011a1fea1bcbdc39c34bf0b8778a25f8fe1f33

    SHA256

    421fb6cf6462e6022e9ead9c2b87a2c1f8f3a3c300c131e867c126c3fd9ff034

    SHA512

    e8cf9fe497d3fdbe8bfe98522d9e60c67e61ed67d087e1094536f209161e67e61e8645dac7654e2d313bd499c313463ab079404e4922f9921fcc8cf502677396

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.