Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

08684640c2...43.pdf

windows7-x64

1

08684640c2...43.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:34

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    08684640c22bf6d57371f57620e95743.pdf

  • Size

    80KB

  • MD5

    08684640c22bf6d57371f57620e95743

  • SHA1

    9a0bc39679ad95886a6baa25cf0ec3637a8f3dfb

  • SHA256

    14d42209a514331947683e651277aedaf45f3eb708820e4dbbac5672815420c3

  • SHA512

    f5e56af1a502a5fe9d03e1bec99c2c29a8b8ebeb419d89aae775e76eb639aa88136de3eb78e48716b61bffa35058c21eacc5088cc04cb153248905190acc4638

  • SSDEEP

    1536:q4bWwheEW95VpmGpUwkwjJqDvIASBywYoWOpOwrKWyBcFjNFTt0Y:HWwYE6VpmGpXkwVqDvBwYlwrSyFt

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08684640c22bf6d57371f57620e95743.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    c530f0fd90761625dbd6345977df3c80

    SHA1

    22b7143e7f870b7105a9673a51340140923a46a9

    SHA256

    16be2512b6ea03c64d6b6bc01a35a6b37903523d19b6cb29a4327657801cca60

    SHA512

    3212bf0d3834851085dc1143cd03546d9958b00fcf62c3f065e6c2b73dea11c74ff3aa5e45e2983f5a0bafe7d18924a54d9ca1994f97d8a6148d9c942545a574

    Download Submit