Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

0e7ad9358d...f8.pdf

windows7-x64

1

0e7ad9358d...f8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    0e7ad9358dbe6877a0fe2b9aa6807cf8.pdf

  • Size

    81KB

  • MD5

    0e7ad9358dbe6877a0fe2b9aa6807cf8

  • SHA1

    2b2271deec0e7bf6c9951f82cbd0bbe163400bd2

  • SHA256

    4a03223530729c214fd2d6e533893c873cf0c1167e61bc2c5345c8a52c1c9f0f

  • SHA512

    05315ed763a487360e6ee8718a95011dfad03d304d032d1904705393d56e1fc021cf90cffd15c873090f365539b0a1cc1ae49b1784526b5fd71629b31b52b75e

  • SSDEEP

    1536:yvHXe4nER+s7IIozUemMyfM9rhQdxtje5DRvWVizf+1tRBWUpO7sbZXEdT:G9nE0s7mIHfM9rhQdxE5DRGij+zRE7sC

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0e7ad9358dbe6877a0fe2b9aa6807cf8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6eadb9e79e5f74264673fc8cae1f0756

    SHA1

    1c91584b244d55bb2402a3afae977db829ad7b1d

    SHA256

    2b265497583973b5133231c2bbd6487e1a94918175d120dc380c629ae85d84f0

    SHA512

    c62507f2d58d1d9ce9a05c2f2962d7789e9e4cff4296d80c6ab94b3e4297a10f3a956de24a4951025c0657e06fe8ba5f084353e4f4f8442dc69d30c8426560cd

    Download Submit