Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5495940de2...e7.pdf

windows7-x64

1

5495940de2...e7.pdf

windows10-2004-x64

Analysis

  • max time kernel
    117s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    19/12/2023, 15:51

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5495940de22f2f2b5063bd80a15bfce7.pdf

  • Size

    42KB

  • MD5

    5495940de22f2f2b5063bd80a15bfce7

  • SHA1

    f173ef687b3ce21aacd286f20975d5c7cfdb094c

  • SHA256

    671ce42cf26ceac7f842f7877fc2df00929625bc0d81d21289d7582de3ab2cb4

  • SHA512

    b1923281ab9666590e5b32ac4cec42968b4e64f6beb9b7095faac53bd77ec68e4a08c126d5b78ae891e53d8adfb7b676ae2d74d3ca75fb9573c50134dcc03429

  • SSDEEP

    768:JgeI1zUM1vZercEmyQDpm8rJ48rKWIGhK2in4v74h2x7AK3:kJUgorFJckWIyK2inC7tR3

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5495940de22f2f2b5063bd80a15bfce7.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    4747ea4ca9ab1c908a2ec33c70fb73b9

    SHA1

    771a51804ad4e7a861bc722d7725aa19151b8b85

    SHA256

    eba4696f0910b2dba77fa45af20eb89ea64b6bbb306f0c1482decf8a351b0647

    SHA512

    751cb5ea7dcf31288e949eca8f76f90bbabde7253b5736dde0eb931940f7217cd587a54a8c87b9b9393f3ebc72f19c7008e54bcadfd97d3ae753a64992a0074d

    Download Submit