Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

06a366d83b...03.pdf

windows7-x64

1

06a366d83b...03.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    06a366d83bc64a5073885ea11b085003.pdf

  • Size

    70KB

  • MD5

    06a366d83bc64a5073885ea11b085003

  • SHA1

    7bf4284892c4741faa8fab47faec058c14aa4508

  • SHA256

    33c84212d8bc064b7db35e60c459b43f8187103b4837ed0b2ae458a16318d765

  • SHA512

    35c457b9c0c2bdb226d19f6c87af5787d7732a9ddcb53190d9a379fa8d80c2ac6f677a55f6a778357eb875fc90a2c78fcb4a3734617241200cf33f11867fa901

  • SSDEEP

    1536:oI5l78GEgRH9ubbVnFcQUYM75VBKtW36BJDtjXWQpOCJhj:lJRc3VFcQ67vwpBJBjCCj

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\06a366d83bc64a5073885ea11b085003.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    90cf59ac2a2344f5c0e0f78796c9fbed

    SHA1

    cfa62dd32d5406ce246fad14a4b1bb2c00586f1e

    SHA256

    86cfb287822b488cea3f4d1429992ec106e2abd98edd78975802c710ca3e5c99

    SHA512

    8b506568e61f096fb1d13f86b58609cdc2c22dadf1c5e755fc1bc4bf9b1d55d055f5654d4e572a9f2a3cc4c7f1eaefaf3bc5456da5bad5a8cde196893f2fa69d

    Download Submit