Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 04:17

General

  • Target

    536d3a139e293c5c62667dafd5952829.pdf

  • Size

    122KB

  • MD5

    536d3a139e293c5c62667dafd5952829

  • SHA1

    8bb24731509d550f6ea29f907e2d3e791d23fea6

  • SHA256

    7b77db9f695ea9833891e66e4953e48f63028f420977d13fd4afd66982029b3e

  • SHA512

    c1d523d6be7cadacb8fcf12366db9d4e4df2f8bd36759e7bc184029d2e58c355ce29b25cad68ac6a6c02466742e7355212be0609fff54bddca1d7341303c63dd

  • SSDEEP

    3072:4gsYu8f8zwoLXjzFv2SaaKxtWClDcslrTEZ6kQ1m:tHubzfzFyeslrTE9D

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\536d3a139e293c5c62667dafd5952829.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2144

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    803b9690cb3ef8e2ac167df7145b0071

    SHA1

    fd24bbf4784137a4613ec8a44ce8d62e7d8e1ad1

    SHA256

    f42e3c5d1ee7b90f5149396682082bce8ff219cc6fa7f5cc714880528ff05961

    SHA512

    e8ad8d2c88702cad997b60ee8b4391cb3a801ba81497f8968082bd67db6066148e7cdc183e001153e9bc286ba68585bff8b0b1f6bb78cb3da2477a029a795cb6