Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:56

General

  • Target

    07b6a60f8f82ab48610f308100a8d0c9.pdf

  • Size

    89KB

  • MD5

    07b6a60f8f82ab48610f308100a8d0c9

  • SHA1

    6940b071580702dba55df412cc937dfe91402c2e

  • SHA256

    90935deb8be7317278b3586da359b31ef5109bd16d5b1a9f7aca3c6cbf17318f

  • SHA512

    7ab63e48cdec6a90adf9f3425afe36abaa3a0e38acdb50b4f5a0aae4c1a7862eb8690622555f6f07ce6ddac9bab39165359b0636bef10dad5fb354a67e263396

  • SSDEEP

    1536:QLrUlEQ+iYhnA4tgJoR0XybQdNEFqkGB4+WSmCpIH9F8XADYiV7WOpOwr/YiSlSi:xHYhnA4tgE0XldNolaIH9FDPYwr/YiEF

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07b6a60f8f82ab48610f308100a8d0c9.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    6d880dbabfce0d00734efcfb0fae94e1

    SHA1

    3d497cd6fc0c8035dec8435119249f63651b8d07

    SHA256

    71fb979bbf51e9d2ae7574805f1b394ae68b38d69b1e68363010ba08c9060db9

    SHA512

    3f4c1a5af06bcee41469375c9fdffaaa2bb745397900fd9707cde1946c1493dc5ebc2bbc0100042585a26c3e8499befe4d59d1e2b2c53c8b90b9d169711db026