Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 03:32 UTC

General

  • Target

    509662e1937524cecba1167cfd0ca5a1.pdf

  • Size

    44KB

  • MD5

    509662e1937524cecba1167cfd0ca5a1

  • SHA1

    879243c49b8a7d31e2758eea1594cae91aa2cfba

  • SHA256

    5cb64023c6cdfbb0ff5358041ca4b27b153c315be2bfdb974488dad5716a2749

  • SHA512

    3fe6f41a802f778c90e169934c3706e433ec2c82dde13e0e6db5590fff62c3b2990bd561792ca1d7c4be1372d4e67e92238287a51c9df9beb5bba0a9341d0186

  • SSDEEP

    768:kgGzpDxpP5GEPrle8r2qIOjZkYJJhu5NVT7UJx0s13zJPj/zCnUAoKNWC7+91TKF:RGF18qImmYJJhENdIn0q3zV2nUAoKNWG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\509662e1937524cecba1167cfd0ca5a1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    0f8fbaa09844a0430c1260c152e1db18

    SHA1

    f3f2cc56dbf84413c64dc36c14a3cf3fa7e4ba0a

    SHA256

    c6054cfdd06ae0e6ed55665b490c1162f35d698bffc450b99cdcb5a13821ac27

    SHA512

    f17229999ebda7732d09f63eba7ab423d8054eba56e0f6ba7e46c2684b78c977e3f6d2327d38341ee64794aad2730d055a925d65fd442b147308eebc86df0aec

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.