Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

fc63bbafff...f5.pdf

windows7-x64

1

fc63bbafff...f5.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    22/12/2023, 17:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    fc63bbafffad0e5f1866d67f53c540f5.pdf

  • Size

    53KB

  • MD5

    fc63bbafffad0e5f1866d67f53c540f5

  • SHA1

    4dfba1188369326aaaa12e4aaf42ec8c62e4bb19

  • SHA256

    ab03889644b0fd380b75ba3a0b4545324667d0bd0c50493b355ff123d487ee3f

  • SHA512

    4aa3d98334a9860ef961e9f307e47a0ba61a364ea0f5533158c59a47fdd3b3ac6e4abb8f599ed01928c57a5011e752592dde8e5497fd7a36fdb4e06bcf41cd25

  • SSDEEP

    768:vlcMnZh4QeRcHjIiYoy4njzLGrqzf6DUX7z+Xg7UVjeNkXZSzQ5kXTWiK:vqMZh474jIQR/LGrEfNX7VUgNp85KKiK

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\fc63bbafffad0e5f1866d67f53c540f5.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2112

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    954736e88d671f6684187fdc6672b896

    SHA1

    644bf17df46d889fdaa2962f9582e52c3bafb031

    SHA256

    fd166dff31b94753c34d9d454b61a6465b938af98cf3678159bfb132ef55f683

    SHA512

    828fe8687d37debc166cbebd2e0106a89515179ad43bf08a2fdc5e93e8f439eff27b1268d2115aad6d60e43655cb3f1cfa3cb67cb433d552cad22879baa697dc

    Download Submit