Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

1f6611b35f...35.pdf

windows7-x64

1

1f6611b35f...35.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 12:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1f6611b35f854767dbb853165d1b8435.pdf

  • Size

    86KB

  • MD5

    1f6611b35f854767dbb853165d1b8435

  • SHA1

    8217af2e2ba24b59e399c6bcd2a00a241706383b

  • SHA256

    ada3c184164ef7a548c63441ff2137e42bab05c596234917df33973ea3b8dfb5

  • SHA512

    89d1c7bcf2bc5e47f7490525810467cab891ff8c1d822508b072202c3055a9f0cb50ef34a7b8b7b72c4881a24f94c98ae346a86d401e5b819c672eceedf0bc7a

  • SSDEEP

    1536:rPBT5RyH5XBSahjnhKxRduY9p7L5IOzMTOTKWHM8jSlDPr0mWxApOGgGz7QbUVMQ:TCHwxJzn5IOctkiDPYz3G3nQb+MQ

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\1f6611b35f854767dbb853165d1b8435.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2076

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    346a886ca0c1b4faf0de35866da4fa3f

    SHA1

    77b78e9a821b6c8494590a81288968626d4a5411

    SHA256

    7b63d59964c7b413047f69a21533cb3fe5e3940e0d71578447fc37388b6b385d

    SHA512

    e20565d6ac4a741601077763c596fb916f2e8153c6064c1cfb379fa947a66061a07f9440d348a2130638ad1f6970f2bed2fdac23cb932d4adf9bd6dc4a3d44a7

    Download Submit