Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 13:38

General

  • Target

    a87eb00f526cc1d917f518f3ce28d99d.pdf

  • Size

    70KB

  • MD5

    a87eb00f526cc1d917f518f3ce28d99d

  • SHA1

    dd816ac6733f784c013747865b99879ee793b857

  • SHA256

    ab851057b29b3dd658c533c4f065318de20aa7b7ea2cfa97ccb8ddf67e562703

  • SHA512

    31c27ae4c2f5c0d82789fc653604a7e2848cc639f5d27d95bbd3eb12b34177e8873537e10e41ddec1da233f4d6c18f5b7e1c729e60917d516018ede92d49fd58

  • SSDEEP

    1536:mZaguYZ3An+R5SHxQ0dAo44olu6lGBWsRkp+irojXXxDpr:rXZgS7Ao4HGosRkpGjXXf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a87eb00f526cc1d917f518f3ce28d99d.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:1736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    9283140fd74d0b5cc188d0f06fbc1f9d

    SHA1

    7aae641a24493d589f6c4c467dd19479bade6dfb

    SHA256

    4278430588b0277a38460d8914adb4a6605fc11909aef8c4f51dc74109921c5f

    SHA512

    5a11988d3b6c579f357b822c25c9164d27a18412559199f445557df685c469d55f3dbba3f90080664d673714e146534bf4cbc59c158bcbe80925960ac62d9d12