Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1071dd0355...78.pdf

windows7-x64

1

1071dd0355...78.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:08

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1071dd03556580690109095a498cfc78.pdf

  • Size

    85KB

  • MD5

    1071dd03556580690109095a498cfc78

  • SHA1

    a4ea227a9c1d879cd3e06ea9471c5dfa7df6e483

  • SHA256

    8a6cc90c81a3cb25983cb423a94ad5853143bbb7beefb7d1c7a2cc29d763d9c4

  • SHA512

    528794c4bd650eeca88a22206e2d936ff421209e830084a394781175c33b8b755c8746661c8f7a3e83b97624dfccef9f4f5df1041de5e75f600350669a4827dd

  • SSDEEP

    1536:vgOo7RB8oaJEn3E/lpBgLlTr/hOjtR/5LcWQpOCoWEpuVj2WFYKG3yUMDj:Iz1nApShwjJnCUpYiWFzG3/g

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1071dd03556580690109095a498cfc78.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    789f054f3041739efdc6b5e11859e7ab

    SHA1

    93fddb80ad8609cf85c0b1ace14d6d0a77bca78f

    SHA256

    65d8df30b6bc3821c4f0f30402821093b58d4527f2b1bd0f276d350743542e8e

    SHA512

    e5eb916e2610404f87ff9373bf942feb8e30a1b0ccafca7a7aaaa6c8a9ea25c07868ee930e464a333aef84b8c67766e4ef28e6cd618f4a995e9d382e7ad02316

    Download Submit