Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:31

General

  • Target

    0702eeddbfa32638e7b7b78e8adf0490.pdf

  • Size

    88KB

  • MD5

    0702eeddbfa32638e7b7b78e8adf0490

  • SHA1

    f34d3d4e21b3426824ba29d0f5ebbae6aa662b53

  • SHA256

    49ff8fcdd7aebf27cf859b4a787d421eafa88ee3e6835b944eabbef7b900d8c0

  • SHA512

    661905e601287a34940580960f0cd8cfdde6890135c2219210cf2f47dd33b8e7771ee8ef88eea35b317e2df3932c767ce879a75fd7d7f7eb1715be28151f1cbd

  • SSDEEP

    1536:vtBDEBFaQpKAPoD9aJQ4tfPN59eM/TbMwd8cgWTAhJg21MeW8pO7fev+3aXLoJ:rDrRAwD9azfPN59hTHrOt1Md7WmKa

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\0702eeddbfa32638e7b7b78e8adf0490.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2332

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9038132c73ab5b0c110f1a02a85a79cc

    SHA1

    21b9a50f2b15419206aa93639bb0419e701d995f

    SHA256

    dcba3e9b5e0c81dcbe3c50a2d6fa35eed50c89ee81bde55098230a03fb9173be

    SHA512

    21e2b12f496ab55b5d4784d01047681f03f5806c0ad6b0a2d658fded57ce150f0aa0d3684ab6034741488835f5b60187559fe94315859098fe58155a8a1ae89f