Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 12:57

General

  • Target

    930907e5dd70cf1a144326a0fefa8213.pdf

  • Size

    35KB

  • MD5

    930907e5dd70cf1a144326a0fefa8213

  • SHA1

    421ff644c97e6c84645a4c89182e13f25c43c62c

  • SHA256

    5ab094118e8ad2d17e3c026b996a7a35566fdfaf11911213a81580c91a016cf6

  • SHA512

    0aad6ea3281430f3abab7173fb4f7688d1eaf15ed4105437ae5b412c6b052b4926e9597d40bd588d6644712b472dc6fcdb7abc65324f57ef64257be12d8b53f0

  • SSDEEP

    768:Y6mmgadUR4h14xcBDjImWQr/uYndz5XxUFs3XSmaJmVEBhDrqYJe14peEc+p:Y6mmgaCR4h14xcBDjIm91x5hUeaD+R4D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\930907e5dd70cf1a144326a0fefa8213.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    8ab0fa792db85e4cca05774fa7e7264e

    SHA1

    950ff8f3ef5d179eca59d82c9b1bc0f07728f665

    SHA256

    79c818487d84b46ce1a69b429c60b8740da4c88bada6f11feaf7f999100b1d8a

    SHA512

    f42691cb2edfac69389a53fc9b738a4f0da6027cab8be1d643e8b004e8c954966bd053a75c41ddc78926d1cdfe7bc5367e8f908418c5391bb57db3879c6e1622