Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

11e66e497d...85.pdf

windows7-x64

1

11e66e497d...85.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    11e66e497d4e22ef5f32d733966a3685.pdf

  • Size

    77KB

  • MD5

    11e66e497d4e22ef5f32d733966a3685

  • SHA1

    674a68633e3a9fee4cda3497846c2fd19443a487

  • SHA256

    f2707e1bd1c6ac272e4eaa089a2312a43733668074d37982766f49939f155b41

  • SHA512

    91192f18927b351126791e4a9312d8871c433bed421ec682498920d1e471d858ce4cffc23e7eb561e3d0e5e99460b7007d24777dc809015d12f261a3dc7ca58b

  • SSDEEP

    1536:9yCQTVn6ItK84qh+jt2H9SNtHgxWYpO2kbhxnI/Wa8OXQosGt5fCMq6YJ+:A6ItK84qhut2d2r2kxnLwthCz6X

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\11e66e497d4e22ef5f32d733966a3685.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1712

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b1c3996c6d377b1dde62b81bc78ecc13

    SHA1

    687b181d6972c2fb22cd5e2f484f0ab5860350b4

    SHA256

    a00f91d9ac3c9a9591459d3d5df46abee179f612db005460a25e0b91bfa3ef90

    SHA512

    24bb24f1b5dfe11e4eb239dfec43ad596a4c32aab26fd031e2a7c0cfe7f022a0e28f988a37e70a42b753642b4058c3f841cc5edf5e377f79cbe82711f51cd538

    Download Submit