Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 01:23

General

  • Target

    202e3bfaac592faed80d14e24d3be240.pdf

  • Size

    90KB

  • MD5

    202e3bfaac592faed80d14e24d3be240

  • SHA1

    ca83d9be1dbde7ed3d923742bf47563b4bb8880f

  • SHA256

    27874b83a8280f7584e2b2c97be64f2127f4a3d9aea8001c219343e642d20213

  • SHA512

    b918b60737c1561bb17d46a3a3cd2071360773cc3186f4a7d2b5be2014e2922ea8395dfb7682b4778164a39f58c98ebb4c37e77b217e4977db6f37adc403218b

  • SSDEEP

    1536:HZsr27VUT15YW95horcGcMSI+GdIJHjBXU/2nhSYaJuUz4yyW7LxIOfWspORRqm:UYUT/YWXGrRpD1dIJFX5nMYaJfz4yIO+

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\202e3bfaac592faed80d14e24d3be240.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3024

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    318208682db5c60adebf2b1a1992181b

    SHA1

    474ffcd194bd3e8c2cd211fbd2fb4d784c17de95

    SHA256

    b788f3724f4911f8e88163c954104da274b6ca0bf0961f3ebdf233e95dd8acd9

    SHA512

    46041db0ae5778ba849b578105da168e31795cbaea5b6e4ad2ad9ddaa56f502913fdec86539cdecefb21904454e2e43425a0b4fff84aabd2123526230f5a386e