Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

e11579291b...86.pdf

windows7-x64

1

e11579291b...86.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 15:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    e11579291b358e6c6ebb0b06318acd86.pdf

  • Size

    82KB

  • MD5

    e11579291b358e6c6ebb0b06318acd86

  • SHA1

    99ab0bfde75e0dcb7c71864928fb9a327bc0512b

  • SHA256

    deb6c10408b6364710db2a39a3fe5c1e06e0e00ad14182668ab9355d70f2636a

  • SHA512

    11411328fefabec26b607a3494ffdf2971c58740eaa95231c2dea4dfb85b28fe2cd52e7281a007b2333c8600929659e33450113c9552d03b8017e7a4ec5f756f

  • SSDEEP

    1536:svLeBgM1AwP3Jbob3p78UgadnrqOWTCB7o2XFOObo2eWepOiDlZieN9I6q:ILCl1AwR8b3poUgdQ1owhbo2/iDlcUy

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e11579291b358e6c6ebb0b06318acd86.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3040

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    b1a4edfb6e4b2b650ebd003b8934ae89

    SHA1

    85c894f4c33d44007e621e6d6f96bc4f6e70ed07

    SHA256

    2a0c42c611ffa4dfa029b2f002a439298e5174134a27e93922a0617a10e0e98c

    SHA512

    287c54e644fa640a09f9f0ae90c3e959dd094dca1653ba5e7b0ea89f6ce8064dd851875b31a8278153ea0b2053139d07ab9eb62d863158e4ef2635076aa685d0

    Download Submit