Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 09:58

General

  • Target

    83319b512a4711ca2b595c83543995ef.pdf

  • Size

    46KB

  • MD5

    83319b512a4711ca2b595c83543995ef

  • SHA1

    49350a8c3b214c839e8ebbef7782135840f66beb

  • SHA256

    1970b7a3b63a341c7295741e2901736a7fd88d8e5262c5e302a31dfcd89bcc6f

  • SHA512

    042f593e6662406311d447c0f3737a75b5f20f05120f6258dbec15cc1850bbb8de7d447badcac425a617aa2a452d127040fdd80906de8a792015161219897ea5

  • SSDEEP

    768:lqEbmS4eujkJQUiHPN0qI6YwYq2HjHQ/6zREkfilM/aZM82gOWwNT:4EB4euoPiHPDIXRqKwIukfiH6NLxT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\83319b512a4711ca2b595c83543995ef.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    a494e1817dfa2ba0d4a6a86b3fbfa67c

    SHA1

    6ef3668e927469507481ec6b7c5447d7099a61eb

    SHA256

    f2b290bcb967e839d9c67eb656a907b157b05dbf06c255ead787184d0f1fcde9

    SHA512

    2b9af751e6fc6e169973970d088e8b3c1d88524b596a6f7e9a56afc45366a44919b3a2de1e2d5fe7aad3c3b54e6033cf71c51a63317784d9a541ab91167d8f09