Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    26/12/2023, 14:02

General

  • Target

    74187230a79134b7a23b4f90021280f1.pdf

  • Size

    82KB

  • MD5

    74187230a79134b7a23b4f90021280f1

  • SHA1

    be0ef31d10591010c7074f1ad4bf4bc8027ae508

  • SHA256

    e9d30866f4081ffebe37085fac38020d2e2f2c800725cd1ec105c19c61367595

  • SHA512

    949e2192b8a8c19c1f2cf6c2acc46e432596d9a35f4f840057cba58dd4d0c38e534c1d65d724b48bbb1c658caac6ec8c9ec999748838ef6bb5e2b8b119fd6fc5

  • SSDEEP

    1536:AZD0JBnuTAolQxJ0B0uW5VhduvLb9QCXw+mP6wzdyRWypOlLCZVWH77BnQQ8J9P:CwJkQxJ0WzuDb9QCX5m66lLCZk77BnQn

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\74187230a79134b7a23b4f90021280f1.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2600

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    db1dd7dda86d9a6506e7cbdea7c69b5a

    SHA1

    a293192250a460594eca4d8a1059ad9a5881aecf

    SHA256

    8f6f414496f361aabded5f1a78f3e51f28bc18286cf771a7a788748a4cfc72fa

    SHA512

    cc4c9b0c5619c7429a1fa987c437e9443a4759eb3ccc38beea27cfa0b84d52d89409bf5a540e54442352c2b438cf8469c75f524c74ad733b4d74a1590493f7a7