Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

6

Static

static

6

3689d1c913...9b.pdf

windows7-x64

1

3689d1c913...9b.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    121s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    25/12/2023, 19:04 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    3689d1c913ad563f74acc22aec73099b.pdf

  • Size

    9KB

  • MD5

    3689d1c913ad563f74acc22aec73099b

  • SHA1

    fd91b12c89895e47d2d05236b47edff868a16f6d

  • SHA256

    40a3dcffa98320636ee436e6be90a3a1756e6c7c7ff78eee1361c1b1521d7b4e

  • SHA512

    6804ba0cdadffd553ab50333a67538dd34b8f9485c6156f2ae3cd9847b38102bb6d8bd42927f11f4c1b4f12520488cab79673a7d70960dc41388f94017e10d27

  • SSDEEP

    192:V9hzajYywAO9G+/v5vQNi/60un/TC9htpbOx78y8AdvIP0Fizga1tjB:nhzazwAO9Gi9Qi/60G7C9htpCx78ydIJ

Score
1/10

Malware Config

Signatures

  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\3689d1c913ad563f74acc22aec73099b.pdf"
    1⤵
    • Suspicious use of SetWindowsHookEx
    PID:3016

Network

  • flag-us
    DNS
    adds.kbleisnerresourcestaffing.info
    AcroRd32.exe
    Remote address:
    8.8.8.8:53
    Request
    adds.kbleisnerresourcestaffing.info
    IN A
    Response
  • flag-us
    DNS
    adds.kbleisnerresourcestaffing.info
    AcroRd32.exe
    Remote address:
    8.8.8.8:53
    Request
    adds.kbleisnerresourcestaffing.info
    IN A
No results found
  • 8.8.8.8:53
    adds.kbleisnerresourcestaffing.info
    dns
    AcroRd32.exe
    162 B
     160 B
     2
    1

    DNS Request

    adds.kbleisnerresourcestaffing.info

    DNS Request

    adds.kbleisnerresourcestaffing.info

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/3016-0-0x0000000004DB0000-0x0000000004E26000-memory.dmp

    Filesize

    472KB

    Download

  • memory/3016-3-0x0000000002020000-0x0000000002021000-memory.dmp

    Filesize

    4KB

    Download

  • memory/3016-4-0x0000000002020000-0x0000000002021000-memory.dmp

    Filesize

    4KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.