Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

147304f4ff...a8.pdf

windows7-x64

1

147304f4ff...a8.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 11:29

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    147304f4ffe49fea9ed0a0c9719efca8.pdf

  • Size

    71KB

  • MD5

    147304f4ffe49fea9ed0a0c9719efca8

  • SHA1

    d80c2316055fce9dfd8491c1357c81716167de27

  • SHA256

    10b475ba8f8bdb9da827bc0161d12c4c52392da45a5fa1c19170e3272eb60958

  • SHA512

    9b2f81cfbe9cebffcfaaf270c7e6ec36152c8c1ff87fe7a24fd1f091d51f805e1aec46aed484eedcae17c58e74ecf3a6d66342e513af2a51f3f993e306f242e4

  • SSDEEP

    1536:4svxCO/P7GYJZAXPdCDcX1vXYWs7CGfyScnKARqW8pO7NlD:VxPPvAXQDc1v87CGfynnKA/7f

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\147304f4ffe49fea9ed0a0c9719efca8.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1716

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    e675353e2a84b7b487cbd81437db14e5

    SHA1

    a1d2156d3b8c60de7bbf4aa09baa85d99b3d1a7a

    SHA256

    832a4739cea527924bac54247549cecdbce64f147068cdb981dd6c64d33fcf23

    SHA512

    4dd912f627bb854e7c7f108bf6353801bfb1f4ed4ba24fd557948444e26369968b4945cc76226bf34bfe2d71ea2a1db61c4b42062d012643bc02575a071af0f4

    Download Submit