Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

a820719cff...2c.pdf

windows7-x64

1

a820719cff...2c.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:37

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    a820719cff8e1557ac88c97ff2e4b42c.pdf

  • Size

    83KB

  • MD5

    a820719cff8e1557ac88c97ff2e4b42c

  • SHA1

    3ac2b49f7bf43a82fb9573c6a639f5131619b261

  • SHA256

    89844ea41b061adeb35c67fbb9bc06ee93f8fe2087440ec33c783fb985ab6347

  • SHA512

    633ba6b2c336608725b45d9c47a1632f2594f386de3eaefca2a2154bfd652674133dce7c8d4f2cd508f90b36e13f9bced807479f004964571cc19ea0bccb3b80

  • SSDEEP

    1536:1DxC5D/41xs4Es45wrCp84F26RKRCn/iWeHE9mniOlTWApO6rZXUM:R8QgstCp8o26RKEnrmi+i6rZT

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a820719cff8e1557ac88c97ff2e4b42c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2184

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    379a34ea7cf6a424fab8ed733c3994d7

    SHA1

    150d996b1ec89663fd006c79060d5a37a41bb672

    SHA256

    a3081a7cbcf96e1ea220c209d51a10feb96896363d1a842d59474a7dbee7e34c

    SHA512

    efb5324176a3bdf732dbb666d186bd43c40d0081d297e46219468050d0f480865ed0bec822db5f862a6e53852e7d3a86dce0f5e8db0ac8d15a5ef38d7a532448

    Download Submit