Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 23:57

General

  • Target

    07bc43fb143a6c08bc498082257596ec.pdf

  • Size

    78KB

  • MD5

    07bc43fb143a6c08bc498082257596ec

  • SHA1

    e4b89411292c87307f4ecb1b17cc4361fe81fd81

  • SHA256

    a4ae75c6c007f7b0405f399e838e9a78f08c27ba86ca60904852700ced5c1a14

  • SHA512

    5ffe3a43ff1ccec2c81c94f722547dd44b7646ea408351da24ce2ffbef2696fa3eb763849f40777b0765e83a9a565e76a5338e8adcc329ec900dacd6e52252df

  • SSDEEP

    1536:40TULj1+O23e4/WR+jLw+Xdag5p6Zf4V/z0fiwdLf8BZ41NIpbekbr:bCj0OKeAWMXwkD5UZfM/z0KwdLfiGQbf

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\07bc43fb143a6c08bc498082257596ec.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2756

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents

    Filesize

    3KB

    MD5

    f813074a13bfcdd671f155700a612eea

    SHA1

    69eb2a23d4f3edf2ccf6591d34887b5d30f870f1

    SHA256

    27e4d8053fa3e71f19cc721c61f02a471bf9f7bc54c41553887b35c7323f2626

    SHA512

    329331f046bba82c565dce021f6ed3a4dd9a1ef40b1b0ae669b93e2026d3ac68baa21f7d75deceb1a279e2878e2a36addf4bc2c242be45b8e25882e3518fcbbc