Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231025-en
  • resource tags

    arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system
  • submitted
    13/11/2023, 08:16

General

  • Target

    DMES 2024-The 14th China Digital Marketing and Ecommerce Innovation Summit 2024(4).pdf

  • Size

    293KB

  • MD5

    afd96bb03b0b23dc624ee69c2196c786

  • SHA1

    493beeb1c7c92a0320e3dcbb1aa934baa761053a

  • SHA256

    41c4d3c43e7b5d7cb5ce37e7e78feaca10abb29863239fa2618fcfe793b01a84

  • SHA512

    61208f0761d4157b0af0264bf7ae110649abb9b389b6a564a452a0ae0152cc3c042c50f84dd86ab964e8672accfc46edca3b36b1fd1b7f70f20cbb8067290fb4

  • SSDEEP

    6144:qfvcuzuGgtpIz3s5OIkh4AhKj0nyLPaT2LDw7hCcbyJlYSqc+oL4O5:R7TILmkh451zm2LDtcbyxqALb

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\DMES 2024-The 14th China Digital Marketing and Ecommerce Innovation Summit 2024(4).pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    b1e8e894ce37e9f07f93152e62627e7c

    SHA1

    4035eb47e74f83a5a7c4524b112b601a7b828185

    SHA256

    ef8c4a7ed771114e21f968fabe4e8f1cb828470c803eb7bd175ed5ce90d8d34e

    SHA512

    b513dd70cc4b64d77610ee329006974e3417b7660d634812580b5cbd042d9fdb4428f58d62ec5e36dfac4098792614344e9f79728317ce788f36c340883f5116