Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 07:58

General

  • Target

    107eab7fe2ef3c4c9f5d6612a98a353c.pdf

  • Size

    88KB

  • MD5

    107eab7fe2ef3c4c9f5d6612a98a353c

  • SHA1

    c08a5ba9e4df91335f3cab1dd282ae3558e813e5

  • SHA256

    178024848da35eb84b154965848cbdcded162412e803f3568c753016ca034919

  • SHA512

    fc44259297a6974d73762474595136b4ca6d2ae29cd5e3a7c9e3fd1056d4ff351525b290acfaa924be4b48f71b7a6a005996d3c05851feb938cebf86502a0b24

  • SSDEEP

    1536:Qi91zdAtlHZp2G73hf5bFM5etWNNvEumZk/CRH5oW+6v8aPylWOpOwr0yrsIqZ:d9HAvn73hfQ5e8yA25v8aKiwr0ua

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\107eab7fe2ef3c4c9f5d6612a98a353c.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:848

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    31ab01530a071b41d14c230d0a45a10c

    SHA1

    a7902672e53b6fb4455f0ac6a0138aee14b79312

    SHA256

    effecb2acfbb18342e4e4ec92476078e4e515938562ec236422bec533e36ab80

    SHA512

    3c6c93be515c2312836d705bc0173dc15a153ccdad9800c0719704a91efc4a6bb89c8c33792f56aadf75ebb4b9d4c2f485d339699a8a3377255c519302adda9c