Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5a84271d21...42.pdf

windows7-x64

1

5a84271d21...42.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5a84271d210b0eca751320cb3dd8fb42.pdf

  • Size

    83KB

  • MD5

    5a84271d210b0eca751320cb3dd8fb42

  • SHA1

    d1a6d0813a325ff44c6b2b787284ce3f63440a00

  • SHA256

    1f9601f073e623b60bc706d2d2acaf841ae2f19fc66108f089dc4c5cbd0a48da

  • SHA512

    4e1aeaae6e0b3964c27b017ff35cc237da7ed7f1955d819ccae5c070ebadcc517f969056ab446ca327befc18ebaab18cc9324320cca64563a49ba389e165afd4

  • SSDEEP

    1536:juMCIFpG+zm8q32t722/zEkfl8V5tsaZbgWyeRBtiWUgw:nc+zNqmv4i8nts0bgWyebwWw

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5a84271d210b0eca751320cb3dd8fb42.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2192

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    dc872694aac70ae9b89c96a3f9b57aad

    SHA1

    9b7912997ed148758c25c74b4ca1098211daa39d

    SHA256

    270026d23092840f06bd38847b5213236699e4da36230ad4684e024dc5b1f08d

    SHA512

    abebd93ded6a8eef63dcc13cbf78e0637c2464f91ec275757a14dd19d135368d77895e01f50e9a9a7f9e200330263ae1a824765eac116ec0155efdad935560e4

    Download Submit