Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 12:35

General

  • Target

    2461b18e29e83d5857d70be9f1e7baa4.pdf

  • Size

    83KB

  • MD5

    2461b18e29e83d5857d70be9f1e7baa4

  • SHA1

    10bb27cebd7d12506c6aec0040ce0a955db71c5c

  • SHA256

    13281f7807fb558e7c2e08d526647fe446acfe1d2fb09917e8a0496757db8075

  • SHA512

    fab2626bb362826109ef3deb4ab9dec50eb65db05175ec01af9fc7effed7a92be63ce33058c5391485882a750bca6f8da98b5d77f50b4a56988e8e57b77de550

  • SSDEEP

    1536:JeflAZyXaHLv7hFGYLFnr/r50Xjakh1+tWGpOKCWIDDqtIfrLC8kenBB9ljoFy6:iuZyXajvGYLFpsF8iKSfqb8/nBB9Vw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2461b18e29e83d5857d70be9f1e7baa4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    3817430dd63afd77d48ae7ea1d62c814

    SHA1

    c773470a8cbc1296d2a7656696df219cfa01c22f

    SHA256

    4f00d7e9b42f2c6bd941c99c7c11fd08aff6dadd81fc1b0906bbc1e55a3b24bb

    SHA512

    facb40ae3469a9a8d30ca6c68960f48c215a84a70d957760bb59207c18d475e35eabd9fe61fa222c899e49b5732d1f14d177e1b87241ae6d77b2570194671ca2