Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 05:27

General

  • Target

    7177f07922fb0bb81e0eb9d89dfd6084.pdf

  • Size

    36KB

  • MD5

    7177f07922fb0bb81e0eb9d89dfd6084

  • SHA1

    efdc91c85cff0ca1b3b4bc2a31a4a476ec9bc861

  • SHA256

    877e30a817ff18075dfed34b3f1e9e97b75cd7a3a03106651304aa91f7cfc6ef

  • SHA512

    391d4f9edc819036615a2bc538b824cc5ef0547b7c1c2cd639ebb594862ef583dbd9bad49fa70420056c66e0c1924ef56d2ef197b4d2c6d4591d080aa46bf23f

  • SSDEEP

    768:+2bwINVO4LfaBQR89qNg3tctTExcKtcv+GRn07Dq45AJFWA3LuL1GooC:+2b97JLfaBQR89igdctTExcKtXM07DgE

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7177f07922fb0bb81e0eb9d89dfd6084.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1692

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    1f260eba23801c65f2e042895a7fbf84

    SHA1

    b29dc31ef661a0c4b5d4b0261126586ad41631be

    SHA256

    6a4fe7a5ead1a07ebbda14ef113107bc44c03c960b8c8fc90aeebd7a723a862a

    SHA512

    fa035930b85467fc878335cf99d15499f3145f5facfcf7fbf48b78b78c24ef63afd1d28017cdbbe5cb63582d2892d9be220aa5abeb541ae53558c18790cded60