Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 22:38

General

  • Target

    40d460849835aa5d24a1879c3456de9e.pdf

  • Size

    95KB

  • MD5

    40d460849835aa5d24a1879c3456de9e

  • SHA1

    7307d1eaaa663646df8d9af37fa64229af50ff84

  • SHA256

    be2819f59e0e341ee8c3b02afc8b0f654b82555791af45d90971417874617dae

  • SHA512

    38c92c629ddaeeb0bcc568e40fcab877c37087c0bcedfc63c0ee4271bf9f777b0d5c50353b494dd4764fae850d1ffd698f1c81e97e4f07e94d50cbb1735aa007

  • SSDEEP

    1536:WCC7PNfII01Htn3xZ1mFh3i88f/qJGjaU/q7QygMOpmSSwZWbpONiWCpEffxC0:QShHt3X1Ah3i8y/qJGj0UygMOpmPwbN/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\40d460849835aa5d24a1879c3456de9e.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:812

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    42e20ea604ec70daa6efaea96fe8e36c

    SHA1

    2e9bcd41d96b979169a91cdce5646fbb7b1631d3

    SHA256

    0d6eb951502cb3bec8fe3bcc21f2a3a7c7306b3352a4e4f1a6808dbbecd2724a

    SHA512

    018735e5879190c980ddfeb6ffdf1ddc76a3275df04bfd10fa9b4807e5d2562eeab0a8d483959890b56e2b21818b6261fe1a8a7fefa5caea12904bf865200678