Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 14:59

General

  • Target

    48e0a1615887817ba678668dc6ca0f05.pdf

  • Size

    84KB

  • MD5

    48e0a1615887817ba678668dc6ca0f05

  • SHA1

    7243abf165847e3c16e9c53bfac1e443cba9509e

  • SHA256

    bb214f6721bd6da62d5c14969b0c6a3a580e8a0144d06c2765c7a62746b16d0c

  • SHA512

    5f775e92f46938531352501133a78bf1dbc0518065d7912ee7b47419dfb2bf100f677a3db5d65e32b3b56f86b84a9a50266881c270f66c1f497f58eedc1f5471

  • SSDEEP

    1536:mXbv7yxJ6E+OT2HVZE+Qcpco5DEzt23rGh7Q1EXoNFJ0W4BrsPBg+j6cLaWCpOVu:ibv7yx0aTsfZQMDEx2w7hXS2Br1eLXVu

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\48e0a1615887817ba678668dc6ca0f05.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2400

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6da54769f4c86478c370809a7d9b5ce4

    SHA1

    a0506fd5359fe31d2e0c3b4a4631cc1145ae7974

    SHA256

    becf2390ac527ff5c8aec3251b758372d5af59bbe7170ddbf6dbfdbbf73f1e74

    SHA512

    f0edc9d9210a7bc71b7faffdcb6fc53169a348e4398f152848bb47c77bd0347e059b92c22344f70e0626b79a7805fdec489c9a5179226107f84688018c9f52cc