Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 10:35

General

  • Target

    08c868f09ad9c9ee4ac0755c7d6275bc.pdf

  • Size

    75KB

  • MD5

    08c868f09ad9c9ee4ac0755c7d6275bc

  • SHA1

    3a7b2c80067f823e31767f490a906ee14a264ba9

  • SHA256

    5a987c22b3410323459f57642bf3ea4b6413db34d1d3ef61a2d0b93f4d88488c

  • SHA512

    9d81440ed286118401cf37e0792abcd459acec2447219a3f65e1d281eb5158b80595783bf9f503b7b470bb7e5a1ac484d5080e42133dfba7ae3d3cae5cf65bfc

  • SSDEEP

    1536:c2DElnklBUc4FQhDXZgSzaz0bxCaJjYkU1ryNiF//bT2K4wWOpOwrKW0epME1sGw:vEFkXaQhDXKSJNCKEbrD7iNwrNMaI

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\08c868f09ad9c9ee4ac0755c7d6275bc.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2156

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e24a1c4c7b2885e65162ab1ab1035c61

    SHA1

    63a1e375e0fe6cee7b2f9fd7219bf6ba325db07e

    SHA256

    e5571cfac4d38a19c34fed2ed1f1f461fa51d402a9b92a859dbb9b60e3783522

    SHA512

    fc4015c729c24dbc3bf055a3d9157110311564032196be41002af076be77871b69dcb5e828fc16cbfa5de1122c01e40ad5afcf33347895730427c4610ef57075