Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

049fa85d8d...b0.pdf

windows7-x64

1

049fa85d8d...b0.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 04:12

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    049fa85d8d21341cd926256c84ffb9b0.pdf

  • Size

    146KB

  • MD5

    049fa85d8d21341cd926256c84ffb9b0

  • SHA1

    37a93bef03692178dc91cb17ea09bec924acdabb

  • SHA256

    ec23e16ee2c89b0253b97f278ea5704290e9e4c9202ab530a69b3099998996c6

  • SHA512

    db0675479fa3b59cd03d8255b677043ae062dd8a0ac01bacc8e27dba6915834fd3393b634c91200e7ac18e1ebbeeee3d4bde2d530854eabc54882fff93a420bb

  • SSDEEP

    3072:iJvF8/LypXR9woz8Nt4Kgyy5CCI5GEP6p8UlBsAlEbmPVn6NQFYofCdA0:Fjuvz8NtZgyyZiTSp8UTsAl36NQM/

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\049fa85d8d21341cd926256c84ffb9b0.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:3044

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    3a1109a27022d45a3c93bc8047bcd5d2

    SHA1

    b1e265edaa50007141d4fe4847859c9270d360e8

    SHA256

    527696b667900a3323f79d02f75f447adc7536872dee5493a45199df53d9c6cc

    SHA512

    9e7e386910cb1758d42bdaa9a3ad9431b6a80db6532fbdb7b566bbcd06b2d8b5f3204670b3fb3409d9f7fca793fc1ae44c44f854deb6993feb365d8e7aa77ff4

    Download Submit