Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    118s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:32

General

  • Target

    07043d29ead609a7a69ae086205675f6.pdf

  • Size

    86KB

  • MD5

    07043d29ead609a7a69ae086205675f6

  • SHA1

    fb4f088934559c9771a2c0dfd42d15062f5b22c4

  • SHA256

    3cdff64ba75b9802d2febb64a4e47f0bc5dd218d079a657c4104764e66dcbfce

  • SHA512

    b6489eb38dc1c5bac61c9e60596cd3cbfa4a03513388c35d6d47fd7ed50d470d859307cad7247a607088ff628876d45a57a5ac4c3b862c20ef247725af00b263

  • SSDEEP

    1536:YymY0y2oBw3Ts/GEjVcpv0+K/lonWxb5BHL7WjFW8pO+6nD:xmfyBwjgGEjsv0+5IllQU+u

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07043d29ead609a7a69ae086205675f6.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    4a6ba82f154dcb6dc35f501a2b7ec65a

    SHA1

    f69c3608f0ef239c2ed6a5bb1ca2a50b8b2a7857

    SHA256

    aa5dc8195c7013c5aae121b291e441b9358d0dfb9b0a243337f6a86c2078a97b

    SHA512

    c3ec923e86f1171a311573ac4947033f198c64de5f3d5356f1a65cdd2914f8bccb80e72bd3595290631841e9eacb1ae6d6e2758da6c1da1511263d105e33d720