Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    117s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 10:14

General

  • Target

    667513815256948966aff2b1e38e1ec4.pdf

  • Size

    86KB

  • MD5

    667513815256948966aff2b1e38e1ec4

  • SHA1

    d2e1e2866250d717068f17c3ec3570aad41ab4fb

  • SHA256

    d629eabf623a7b7f7625fb8fbc9e2a9da403b431b9397d1c87216a3bb2762397

  • SHA512

    7573489243422ce3794f6970650daf0d29c665091f6e3a474605bc1d6fa64ee8c4e4e112998b317addc56fdfdf5388dd06ffe7ad187924f590943e11e376d3ec

  • SSDEEP

    1536:5yD+HMhWq1h7vulFmAJYzklqE6AD5Kbs0SRbuqb/WGpOKCW2qf0ukYjGxtUTo:sMwWqn7GlFmAJ4O69bbSRbuqbgKsRuk9

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\667513815256948966aff2b1e38e1ec4.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    e5c915b4f4b6b816186f538ef858cd18

    SHA1

    702c0816a319b2543156a23694e17fea0a097fa0

    SHA256

    6984d63eaa1c4cc5da69581a40a2e719e25c09e3aa085f468fd290feb7df24a7

    SHA512

    76a741d6a7d9e0ded8bfb218467dba1c18f46449e7b071af104fe7ef19f97d1d8cb166dd3a4eb1aada27bfea8fee07ea5c395d78398d931df986b05b3d148200