Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

5f14759c12...cd.pdf

windows7-x64

1

5f14759c12...cd.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 03:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    5f14759c128b2257589684fd538e87cd.pdf

  • Size

    35KB

  • MD5

    5f14759c128b2257589684fd538e87cd

  • SHA1

    37afa90232ef1684c22837d03a577fdf052e9e25

  • SHA256

    9f36b026176a685c925469eec3f5a9963abd8d7c0d4059d68127a4f1cace3d98

  • SHA512

    6705255ee0407372f2368887040914d6b39c22a727d42d6756c0a8db22c253b8055e93af77a4e0bb1bb69d5affec8e69b520c8028f03395615bf035838f51816

  • SSDEEP

    768:u4k203odcpVeHts98pAPqbhRR53r1t+KQIkk6aCK6jF:5k203jQU8pAPyrRt+KdRJ6jF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\5f14759c128b2257589684fd538e87cd.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2532

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    484cbb1b9ad31bb7b2bc8d28cbcff7a2

    SHA1

    54d4837d8c24711af284677289f19e0d6f097ac3

    SHA256

    398ac0fe1168f96307665ee106628908b7464b0e461789807f59b5e9b4cf9ec5

    SHA512

    d5297df892dbc8449435205c2d7af4fbdb96dd7d7d7a1c4e8d4c369dd0237234425a6a76c988fb77230072f77a5ffa18b8036125a61902fa087e9f7898783c1e

    Download Submit