Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

c005aea4f0...27.pdf

windows7-x64

1

c005aea4f0...27.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 14:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    c005aea4f01300eb4a3350843f9db027.pdf

  • Size

    65KB

  • MD5

    c005aea4f01300eb4a3350843f9db027

  • SHA1

    94b7d4262d697bcbfb41af8b3284f52a1e2f69aa

  • SHA256

    3015fe60e2b8b20c169ad0ad6f4b20ef4a0d7dc905798922f273f0d93fb1a36b

  • SHA512

    09c11d60db589fd36c35759686ea1a0a8cee5bae7875d798d99c556f06084f3feebe11150ea2f2ed5358b1639b95a4c906133f5cf51b106b09cd25db229223e0

  • SSDEEP

    1536:yqbsS+B3x9slZgCvV4cMDfs1nOgjWlOm7/0lbOUd:vslB3x+lrVz+ENhWlOUYdd

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\c005aea4f01300eb4a3350843f9db027.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2352

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    6a8cfcc0f27d7be7c96ae0128a41a431

    SHA1

    b07eead1dba06996e93ead6448406d2eb77078ba

    SHA256

    3bdb6f94b0179dfb4ec945d72ac5520dd502e26100413964d184d9f356d9f7a4

    SHA512

    bc22109aaa9a012a2250ca6dc0ac8ccdf0ca5b082cd85bb87239444d44e2683a645a5e7a4c5b55b668aa11ce738aeb9206a39602dd01bc6385d4664e5964bbeb

    Download Submit