Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

3

01a6a7493a...60.pdf

windows7-x64

1

01a6a7493a...60.pdf

windows10-2004-x64

1

Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    29/12/2023, 19:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    01a6a7493a73b7d1b0cea93686769560.pdf

  • Size

    79KB

  • MD5

    01a6a7493a73b7d1b0cea93686769560

  • SHA1

    7a3412eb6d3011888406e983712398211110c3f0

  • SHA256

    cad0a4aec1159fc0db08f2bc4f58a8e2c11e11bd5f77cdc7179a3f75402f2161

  • SHA512

    e4e404f457e7e7ddf873342c1c35b97472152d8d469e83f83feeb41dc2a2628e07d11cc29890656a0bf1fb88fab1240fd5a06a0c2265eea4723057075d37aa1b

  • SSDEEP

    1536:CfcKMqWOzXjrGyX/AplLM92yD2g+xmV1MccLOT/AntrO3TFw7T:srWOzTrGK/WKGhK1MDLOT/AnSFG

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
    "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\01a6a7493a73b7d1b0cea93686769560.pdf"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of SetWindowsHookEx
    PID:2504

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Roaming\Adobe\Acrobat\9.0\SharedDataEvents
    Filesize

    3KB

    MD5

    17d46110223bff57c355f89d5b4070cd

    SHA1

    93e41f37b250bc70ef480b3f3784cebb234c61f3

    SHA256

    1989309f2d61301b9a1df9816a873a2a8669887589bed11285798fc86fc9243b

    SHA512

    e3e41b60127662e8216208e1a6dfedbdd153b5e979dd60359fd961825cfee55b2045af83d77c18ab3fc22bf616b84b85ea1d0aa764d5b5f440446284d65943cf

    Download Submit