Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:09

General

  • Target

    10c0334017406a1dfd6c694f81a36102.pdf

  • Size

    97KB

  • MD5

    10c0334017406a1dfd6c694f81a36102

  • SHA1

    b7cb39eb02180d3cdaf089cd896cb3062e79221e

  • SHA256

    f231fcf96573ea96db1732cd3735b717f91c7a4e57b4625580785a3680a11070

  • SHA512

    57c0d93af8cf93156cf3c4a10664a253efb42f5b2c34440eb1bd2825bf7a309eecbe7d312d4f8a3bac1ab77ee134bc870812b98e44b195650135d82a44d28faf

  • SSDEEP

    1536:EzNHTHbtTZMBdeMtcwXQa9YaUoeF3fd5mZsMF2M/RW6pOu26WjBvXGkrYFBr8oNR:qTH/MHe8Aa9YaUoecKamu2brrYkowM

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\10c0334017406a1dfd6c694f81a36102.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2204

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    7d6c3eea3ee3076c574cfcb3218c1bb0

    SHA1

    b2d77e360316c9682f97135749f1116a2e22a124

    SHA256

    50e25a6e5eaa1f11cc20a7bad584aa4b83482a3c29911657f14d57928c6628b1

    SHA512

    ddb6ed3746b4521d9aa0bb1389c7573871ad3a25f7ceb5431b1e0511806a66d52387713daf111126d543940c7a7f68ef8f43a05fcbf7311ca9acc1b94688db97