Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 04:36

General

  • Target

    655d935b2e1c59dd09455cf3f172b499.pdf

  • Size

    75KB

  • MD5

    655d935b2e1c59dd09455cf3f172b499

  • SHA1

    e24d4d0b4847cdd829062afaa23342c0d3bec9fe

  • SHA256

    2480dc307e6d4cfa245e415109865bf9093608f6a84ec7722d3cef03d534c88a

  • SHA512

    e74c790061236ac2ce57cbeda949b0de0e653fd152b89c77dc97b4761c8c9487d690635c163cf01dc4c7997550f23027747dd83ea0823d1298274436d522f2fe

  • SSDEEP

    1536:ACTcSwiqpJtshpsgQMoxjtuZsqHba/SRiwvYRA792Q9Zrt5my77l1wxFFg14Qba:/Txwiy3mlDodS7fwA71jmy7RqnFa4J

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\655d935b2e1c59dd09455cf3f172b499.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2476

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    560ed1675c441cd92b06ffd4b68904f2

    SHA1

    1506e56588693bf88c6565f7d5bf060b7a1eb6e2

    SHA256

    06101543dea1fe185f59add0db8d345569c133170ebd4c75aa6edec63f663b62

    SHA512

    de4e085a03ae1e50836771c8a4ef5fb10934d9bc96876ebcd51604207c2d000f4d3cd9cc93fe0960db86afba6d3baf78fb0784a3e7b2c1b832b443e398e3a597